{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1a091f27-b223-42b1-a40d-089f74d96a51", "version": 1, "metadata": { "timestamp": "2026-08-04T03:55:05+00:00", "tools": { "components": [ { "type": "application", "manufacturer": { "name": "Aqua Security Software Ltd." }, "group": "aquasecurity", "name": "trivy", "version": "0.69.3" } ] }, "component": { "bom-ref": "pkg:oci/confluent-init-container@sha256%3A951dff320547bb5b1c1d6072768326e8a7382fad893bfe1550b2af8c4409bcaf?arch=amd64&repository_url=index.docker.io%2Fconfluentinc%2Fconfluent-init-container", "type": "container", "supplier": { "name": "Confluent" }, "name": "confluent-init-container", "version": "2.11.6", "purl": "pkg:oci/confluent-init-container@sha256%3A951dff320547bb5b1c1d6072768326e8a7382fad893bfe1550b2af8c4409bcaf?arch=amd64&repository_url=index.docker.io%2Fconfluentinc%2Fconfluent-init-container", "properties": [ { "name": "aquasecurity:trivy:DiffID", "value": "sha256:01a360b2ccbccc142d417c2d0cbacf03e27926508878d0b4cb7f3aa8153c2c92" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:053833aeb47137cf227084abee5ea4449e2a9aacd6b9f18b5dc1aff2bab8d672" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:0ae9e637f555306846f33b8b1f66c0aca54e106004b909557d6bc4fa6b657535" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:1ae51ab1a4bb9e67e29076429cea442af15bc10f2c214b53b7d5b805eb43149d" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:2298779b56b2ad3e5e27898a528435a5146417ef784955897f882d6bc0d371da" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:6d2abce5c8e6dbb2ab0ddbadc2919e990de369da5d2f0678654c31686e95f5b6" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:6fdb582681b248cdc3094d2f154cb9760cef1dee061ea9ead35de77613eb4544" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:862f05387929d438312812e4774f2cdbeccdb3e25dd32d09ae2feb80220325ff" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:8ea88b8ad6855d819b392821e09828024ba08519dca4319cc6303445e1b282f2" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:a02984800a925d8605c2fdb6d1040b0b5d687e3f4a43cdcd68a024ae65ac9879" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:b02d8d018a867324b21d8ee67dd0c656087902fbbe02a1395e92131c0871908f" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:cfb2b8a845b03c8a271466bc6bb760af420e0db376c490cc0c15cd128175cb90" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:e6d39d87838e869cdf29721a5175d4c243853e9e0dcaafc142cb2bafe12ad844" }, { "name": "aquasecurity:trivy:DiffID", "value": "sha256:f4d74b82b8a7ab2c0a13f7a58ab4bf0ef06c1b5413a1ea1008c9186812651ac5" }, { "name": "aquasecurity:trivy:ImageID", "value": "sha256:fc185cc126f07862517537c069cf938dc27f070fea5e2db94d4f3a9d91d11ea2" }, { "name": "aquasecurity:trivy:Labels:architecture", "value": "x86_64" }, { "name": "aquasecurity:trivy:Labels:build-date", "value": "2026-05-27T05:18:16Z" }, { "name": "aquasecurity:trivy:Labels:com.redhat.component", "value": "ubi8-micro-container" }, { "name": "aquasecurity:trivy:Labels:com.redhat.license_terms", "value": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI" }, { "name": "aquasecurity:trivy:Labels:cpe", "value": "cpe:/a:redhat:enterprise_linux:8::appstream" }, { "name": "aquasecurity:trivy:Labels:description", "value": "Confluent Operator, init-container image" }, { "name": "aquasecurity:trivy:Labels:distribution-scope", "value": "public" }, { "name": "aquasecurity:trivy:Labels:io.buildah.version", "value": "1.42.2" }, { "name": "aquasecurity:trivy:Labels:io.k8s.description", "value": "Confluent Operator, init-container image" }, { "name": "aquasecurity:trivy:Labels:io.k8s.display-name", "value": "Confluent Operator, init-container" }, { "name": "aquasecurity:trivy:Labels:io.openshift.tags", "value": "cfk,confluent-operator,confluent-platform,event-streaming, data-motion" }, { "name": "aquasecurity:trivy:Labels:maintainer", "value": "CFK " }, { "name": "aquasecurity:trivy:Labels:name", "value": "CFK init-container" }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.created", "value": "2026-06-23T04:21:16Z" }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.revision", "value": "d406f1d94a507ac7c2c58f91f7411c77ff47ca71" }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.source", "value": "https://github.com/confluentinc/confluent-operator" }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.url", "value": "https://semaphore.ci.confluent.io/jobs/63d18834-94d6-4270-9686-0c043d9bc3a3" }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.vendor", "value": "Confluent Inc." }, { "name": "aquasecurity:trivy:Labels:org.opencontainers.image.version", "value": "v0.1193.192" }, { "name": "aquasecurity:trivy:Labels:release", "value": "1193" }, { "name": "aquasecurity:trivy:Labels:summary", "value": "Confluent Operator, init-container image" }, { "name": "aquasecurity:trivy:Labels:url", "value": "https://catalog.redhat.com/en/search?searchType=containers" }, { "name": "aquasecurity:trivy:Labels:vcs-ref", "value": "068c05e269b913edf886cd5332d22c7278c3193a" }, { "name": "aquasecurity:trivy:Labels:vcs-type", "value": "git" }, { "name": "aquasecurity:trivy:Labels:vendor", "value": "Confluent, Inc" }, { "name": "aquasecurity:trivy:Labels:version", "value": "v0.1193.192" }, { "name": "aquasecurity:trivy:Labels:version.confluentinc.confluent-init-container", "value": "v0.1193.192" }, { "name": "aquasecurity:trivy:Reference", "value": "confluentinc/confluent-init-container:2.11.6" }, { "name": "aquasecurity:trivy:RepoDigest", "value": "confluentinc/confluent-init-container@sha256:951dff320547bb5b1c1d6072768326e8a7382fad893bfe1550b2af8c4409bcaf" }, { "name": "aquasecurity:trivy:RepoTag", "value": "confluentinc/confluent-init-container:2.11.6" }, { "name": "aquasecurity:trivy:SchemaVersion", "value": "2" }, { "name": "aquasecurity:trivy:Size", "value": "525315584" } ] } }, "components": [], "dependencies": [], "vulnerabilities": [ { "id": "CVE-2005-2541", "ratings": [ { "source": { "name": "nvd" }, "score": 10, "severity": "high", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C" }, { "source": { "name": "redhat" }, "score": 7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2005-2541" }, { "url": "http://marc.info/?l=bugtraq&m=112327628230258&w=2" }, { "url": "https://access.redhat.com/security/cve/CVE-2005-2541" }, { "url": "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2541" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2005-2541" } ], "published": "2005-08-10T04:00:00+00:00", "updated": "2026-04-16T00:27:16+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2016-4074", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.8, "severity": "high", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 2.6, "severity": "low", "method": "CVSSv2", "vector": "AV:N/AC:H/Au:N/C:N/I:N/A:P" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 770 ], "description": "The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2016-4074" }, { "url": "http://www.openwall.com/lists/oss-security/2016/04/24/3" }, { "url": "http://www.openwall.com/lists/oss-security/2016/04/24/4" }, { "url": "https://access.redhat.com/security/cve/CVE-2016-4074" }, { "url": "https://github.com/NixOS/nixpkgs/pull/18908" }, { "url": "https://github.com/hashicorp/consul/issues/10263" }, { "url": "https://github.com/stedolan/jq/" }, { "url": "https://github.com/stedolan/jq/commit/83e2cf607f3599d208b6b3129092fa7deb2e5292" }, { "url": "https://github.com/stedolan/jq/issues/1136" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4074" }, { "url": "https://ubuntu.com/security/notices/USN-4787-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2016-4074" } ], "published": "2016-05-06T17:59:07+00:00", "updated": "2026-06-17T00:46:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2018-1000654", "ratings": [ { "source": { "name": "nvd" }, "score": 7.1, "severity": "high", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:C" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "description": "GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2018-1000654" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html" }, { "url": "http://www.securityfocus.com/bid/105151" }, { "url": "https://access.redhat.com/security/cve/CVE-2018-1000654" }, { "url": "https://gitlab.com/gnutls/libtasn1/issues/4" }, { "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000654" }, { "url": "https://ubuntu.com/security/notices/USN-5352-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000654" } ], "published": "2018-08-20T19:31:44+00:00", "updated": "2026-06-17T01:33:01+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "4.13-5.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2018-19211", "ratings": [ { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2018-19211" }, { "url": "https://access.redhat.com/security/cve/CVE-2018-19211" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643754" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19211" }, { "url": "https://ubuntu.com/security/notices/USN-5477-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-19211" } ], "published": "2018-11-12T19:29:00+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2018-20225", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 6.8, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "source": { "name": "nvd" }, "score": 7.8, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "source": { "name": "redhat" }, "score": 7.8, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "cwes": [ 20 ], "description": "An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2018-20225" }, { "url": "https://access.redhat.com/security/cve/CVE-2018-20225" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835736" }, { "url": "https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html" }, { "url": "https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2@%3Cgithub.arrow.apache.org%3E" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20225" }, { "url": "https://pip.pypa.io/en/stable/news/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-20225" } ], "published": "2020-05-08T18:15:10+00:00", "updated": "2026-06-17T01:52:28+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2018-20657", "ratings": [ { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "low" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 772 ], "description": "The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2018-20657" }, { "url": "http://www.securityfocus.com/bid/106444" }, { "url": "https://access.redhat.com/errata/RHSA-2019:3352" }, { "url": "https://access.redhat.com/security/cve/CVE-2018-20657" }, { "url": "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88539" }, { "url": "https://linux.oracle.com/cve/CVE-2018-20657.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2019-3352.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20657" }, { "url": "https://support.f5.com/csp/article/K62602089" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-20657" } ], "published": "2019-01-02T14:29:00+00:00", "updated": "2026-06-17T01:53:16+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2018-20839", "ratings": [ { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "source": { "name": "redhat" }, "score": 4.3, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "description": "systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2018-20839" }, { "url": "http://www.securityfocus.com/bid/108389" }, { "url": "https://access.redhat.com/security/cve/CVE-2018-20839" }, { "url": "https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993" }, { "url": "https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f" }, { "url": "https://github.com/systemd/systemd/pull/12378" }, { "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20839" }, { "url": "https://security.netapp.com/advisory/ntap-20190530-0002/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-20839" } ], "published": "2019-05-17T04:29:00+00:00", "updated": "2026-06-17T01:53:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "239-82.el8_10.17", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-12904", "ratings": [ { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "cwes": [ 668 ], "description": "In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-12904" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00049.html" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-12904" }, { "url": "https://dev.gnupg.org/T4541" }, { "url": "https://github.com/gpg/libgcrypt/commit/a4c561aab1014c3630bc88faf6f5246fee16b020" }, { "url": "https://github.com/gpg/libgcrypt/commit/daedbbb5541cd8ecda1459d3b843ea4d92788762" }, { "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" }, { "url": "https://lists.gnupg.org/pipermail/gcrypt-devel/2019-July/004760.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12904" }, { "url": "https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12904.html" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-12904" } ], "published": "2019-06-20T00:15:10+00:00", "updated": "2026-06-17T02:15:42+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.8.5-7.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-14250", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 190, 787 ], "description": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-14250" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html" }, { "url": "http://www.securityfocus.com/bid/109354" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-14250" }, { "url": "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90924" }, { "url": "https://gcc.gnu.org/ml/gcc-patches/2019-07/msg01003.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14250" }, { "url": "https://security.gentoo.org/glsa/202007-39" }, { "url": "https://security.netapp.com/advisory/ntap-20190822-0002/" }, { "url": "https://ubuntu.com/security/notices/USN-4326-1" }, { "url": "https://ubuntu.com/security/notices/USN-4336-1" }, { "url": "https://ubuntu.com/security/notices/USN-4336-2" }, { "url": "https://usn.ubuntu.com/4326-1/" }, { "url": "https://usn.ubuntu.com/4336-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-14250" } ], "published": "2019-07-24T04:15:12+00:00", "updated": "2026-06-17T02:18:02+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-19244", "ratings": [ { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "description": "sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-19244" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-19244" }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "url": "https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19244" }, { "url": "https://ubuntu.com/security/notices/USN-4205-1" }, { "url": "https://usn.ubuntu.com/4205-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-19244" }, { "url": "https://www.oracle.com/security-alerts/cpuapr2020.html" } ], "published": "2019-11-25T20:15:11+00:00", "updated": "2026-06-17T02:26:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.26.0-20.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-19246", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-19246" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-19246" }, { "url": "https://bugs.php.net/bug.php?id=78559" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1724152" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1724154" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728965" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728970" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735494" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1739459" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1739465" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768997" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777537" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1786570" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1786572" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788258" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797776" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1797779" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802061" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1802068" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1808532" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1808536" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820601" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820604" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1820627" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1837842" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066" }, { "url": "https://errata.almalinux.org/8/ALSA-2020-3662.html" }, { "url": "https://errata.rockylinux.org/RLSA-2020:3662" }, { "url": "https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b" }, { "url": "https://linux.oracle.com/cve/CVE-2019-19246.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2020-3662.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19246" }, { "url": "https://ubuntu.com/security/notices/USN-4460-1" }, { "url": "https://ubuntu.com/security/notices/USN-5662-1" }, { "url": "https://usn.ubuntu.com/4460-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-19246" } ], "published": "2019-11-25T17:15:11+00:00", "updated": "2026-06-17T02:26:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/oniguruma@6.8.2-3.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.8.2-3.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/oniguruma@6.8.2-3.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-7317", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 2.6, "severity": "info", "method": "CVSSv2", "vector": "AV:N/AC:H/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 416 ], "description": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-7317" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html" }, { "url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html" }, { "url": "http://www.securityfocus.com/bid/108098" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1265" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1267" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1269" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1308" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1309" }, { "url": "https://access.redhat.com/errata/RHSA-2019:1310" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2494" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2495" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2585" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2590" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2592" }, { "url": "https://access.redhat.com/errata/RHSA-2019:2737" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-7317" }, { "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803" }, { "url": "https://github.com/glennrp/libpng/issues/275" }, { "url": "https://linux.oracle.com/cve/CVE-2019-7317.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2019-1310.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317" }, { "url": "https://seclists.org/bugtraq/2019/Apr/30" }, { "url": "https://seclists.org/bugtraq/2019/Apr/36" }, { "url": "https://seclists.org/bugtraq/2019/May/56" }, { "url": "https://seclists.org/bugtraq/2019/May/59" }, { "url": "https://seclists.org/bugtraq/2019/May/67" }, { "url": "https://security.gentoo.org/glsa/201908-02" }, { "url": "https://security.netapp.com/advisory/ntap-20190719-0005/" }, { "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us" }, { "url": "https://ubuntu.com/security/notices/USN-3962-1" }, { "url": "https://ubuntu.com/security/notices/USN-3991-1" }, { "url": "https://ubuntu.com/security/notices/USN-3997-1" }, { "url": "https://ubuntu.com/security/notices/USN-4080-1" }, { "url": "https://ubuntu.com/security/notices/USN-4083-1" }, { "url": "https://usn.ubuntu.com/3962-1/" }, { "url": "https://usn.ubuntu.com/3991-1/" }, { "url": "https://usn.ubuntu.com/3997-1/" }, { "url": "https://usn.ubuntu.com/4080-1/" }, { "url": "https://usn.ubuntu.com/4083-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-7317" }, { "url": "https://www.debian.org/security/2019/dsa-4435" }, { "url": "https://www.debian.org/security/2019/dsa-4448" }, { "url": "https://www.debian.org/security/2019/dsa-4451" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-13/#CVE-2019-7317" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/#CVE-2019-7317" }, { "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" } ], "published": "2019-02-04T08:29:00+00:00", "updated": "2026-06-17T02:40:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-8905", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 3.6, "severity": "info", "method": "CVSSv2", "vector": "AV:L/AC:L/Au:N/C:P/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 125 ], "description": "do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-8905" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" }, { "url": "http://www.securityfocus.com/bid/107137" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-8905" }, { "url": "https://bugs.astron.com/view.php?id=63" }, { "url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00044.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8905" }, { "url": "https://ubuntu.com/security/notices/USN-3911-1" }, { "url": "https://usn.ubuntu.com/3911-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-8905" } ], "published": "2019-02-18T17:29:00+00:00", "updated": "2026-06-17T02:42:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "5.33-27.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-8906", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 3.6, "severity": "info", "method": "CVSSv2", "vector": "AV:L/AC:L/Au:N/C:P/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-8906" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-8906" }, { "url": "https://bugs.astron.com/view.php?id=64" }, { "url": "https://github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8906" }, { "url": "https://support.apple.com/kb/HT209599" }, { "url": "https://support.apple.com/kb/HT209600" }, { "url": "https://support.apple.com/kb/HT209601" }, { "url": "https://support.apple.com/kb/HT209602" }, { "url": "https://ubuntu.com/security/notices/USN-3911-1" }, { "url": "https://usn.ubuntu.com/3911-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-8906" } ], "published": "2019-02-18T17:29:01+00:00", "updated": "2026-06-17T02:42:46+00:00", "affects": [ { "ref": "pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "5.33-27.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/file-libs@5.33-27.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-9674", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 4.2, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 400 ], "description": "Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-9674" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-9674" }, { "url": "https://bugs.python.org/issue36260" }, { "url": "https://bugs.python.org/issue36462" }, { "url": "https://github.com/python/cpython/blob/master/Lib/zipfile.py" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9674" }, { "url": "https://python-security.readthedocs.io/security.html#archives-and-zip-bomb" }, { "url": "https://security.netapp.com/advisory/ntap-20200221-0003/" }, { "url": "https://ubuntu.com/security/notices/USN-4428-1" }, { "url": "https://ubuntu.com/security/notices/USN-4754-3" }, { "url": "https://ubuntu.com/security/notices/USN-6891-1" }, { "url": "https://ubuntu.com/security/notices/USN-7212-1" }, { "url": "https://usn.ubuntu.com/4428-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-9674" }, { "url": "https://www.python.org/news/security/" } ], "published": "2020-02-04T15:15:11+00:00", "updated": "2026-06-17T02:44:09+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-9923", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-9923" }, { "url": "http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html" }, { "url": "http://savannah.gnu.org/bugs/?55369" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-9923" }, { "url": "https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241" }, { "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E" }, { "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9923" }, { "url": "https://ubuntu.com/security/notices/USN-4692-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-9923" } ], "published": "2019-03-22T08:29:00+00:00", "updated": "2026-06-17T02:44:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-9936", "ratings": [ { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-9936" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html" }, { "url": "http://www.securityfocus.com/bid/107562" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-9936" }, { "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9936" }, { "url": "https://security.gentoo.org/glsa/201908-09" }, { "url": "https://security.netapp.com/advisory/ntap-20190416-0005/" }, { "url": "https://sqlite.org/src/info/b3fa58dd7403dbd4" }, { "url": "https://ubuntu.com/security/notices/USN-4019-1" }, { "url": "https://usn.ubuntu.com/4019-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-9936" }, { "url": "https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg114382.html" }, { "url": "https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg114394.html" }, { "url": "https://www.oracle.com/security-alerts/cpujan2020.html" }, { "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html" } ], "published": "2019-03-22T08:29:00+00:00", "updated": "2026-06-17T02:44:53+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.26.0-20.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2019-9937", "ratings": [ { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "low", "method": "CVSSv3", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2019-9937" }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html" }, { "url": "http://www.securityfocus.com/bid/107562" }, { "url": "https://access.redhat.com/security/cve/CVE-2019-9937" }, { "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9937" }, { "url": "https://security.gentoo.org/glsa/201908-09" }, { "url": "https://security.netapp.com/advisory/ntap-20190416-0005/" }, { "url": "https://sqlite.org/src/info/45c73deb440496e8" }, { "url": "https://ubuntu.com/security/notices/USN-4019-1" }, { "url": "https://usn.ubuntu.com/4019-1/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-9937" }, { "url": "https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg114383.html" }, { "url": "https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg114393.html" }, { "url": "https://www.oracle.com/security-alerts/cpujan2020.html" }, { "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html" } ], "published": "2019-03-22T08:29:00+00:00", "updated": "2026-06-17T02:44:53+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.26.0-20.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19185", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19185" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19185" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc1.md" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19185" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19185" } ], "published": "2023-08-22T19:15:57+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19186", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19186" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19186" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc2.md" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19186" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19186" } ], "published": "2023-08-22T19:15:58+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19187", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19187" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19187" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc3.md" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19187" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19187" } ], "published": "2023-08-22T19:15:59+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19188", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19188" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19188" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19188" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19188" } ], "published": "2023-08-22T19:16:00+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19189", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19189" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19189" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00033.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19189" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://ubuntu.com/security/notices/USN-6451-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19189" } ], "published": "2023-08-22T19:16:01+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2020-19190", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2020-19190" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/10" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/11" }, { "url": "http://seclists.org/fulldisclosure/2023/Dec/9" }, { "url": "https://access.redhat.com/security/cve/CVE-2020-19190" }, { "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc6.md" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-19190" }, { "url": "https://security.netapp.com/advisory/ntap-20231006-0005/" }, { "url": "https://support.apple.com/kb/HT214036" }, { "url": "https://support.apple.com/kb/HT214037" }, { "url": "https://support.apple.com/kb/HT214038" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-19190" } ], "published": "2023-08-22T19:16:01+00:00", "updated": "2026-07-23T18:58:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2021-20193", "ratings": [ { "source": { "name": "julia" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 401, 125 ], "description": "A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2021-20193" }, { "url": "https://access.redhat.com/security/cve/CVE-2021-20193" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917565" }, { "url": "https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20193" }, { "url": "https://savannah.gnu.org/bugs/?59897" }, { "url": "https://security.gentoo.org/glsa/202105-29" }, { "url": "https://ubuntu.com/security/notices/USN-5329-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-20193" } ], "published": "2021-03-26T17:15:12+00:00", "updated": "2026-06-17T03:33:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2021-31879", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "source": { "name": "nvd" }, "score": 5.8, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N" }, { "source": { "name": "nvd" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 601 ], "description": "GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2021-31879" }, { "url": "https://access.redhat.com/security/cve/CVE-2021-31879" }, { "url": "https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31879" }, { "url": "https://savannah.gnu.org/bugs/?56909" }, { "url": "https://security.netapp.com/advisory/ntap-20210618-0002/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-31879" } ], "published": "2021-04-29T05:15:08+00:00", "updated": "2026-06-17T03:52:23+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2021-39537", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 8.8, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "source": { "name": "nvd" }, "score": 6.8, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "source": { "name": "nvd" }, "score": 8.8, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 787 ], "description": "An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2021-39537" }, { "url": "http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup" }, { "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "url": "http://seclists.org/fulldisclosure/2022/Oct/43" }, { "url": "http://seclists.org/fulldisclosure/2022/Oct/45" }, { "url": "https://access.redhat.com/security/cve/CVE-2021-39537" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html" }, { "url": "https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html" }, { "url": "https://lists.gnu.org/archive/html/bug-ncurses/2021-10/msg00023.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39537" }, { "url": "https://security.netapp.com/advisory/ntap-20230427-0012/" }, { "url": "https://support.apple.com/kb/HT213443" }, { "url": "https://support.apple.com/kb/HT213444" }, { "url": "https://support.apple.com/kb/HT213488" }, { "url": "https://ubuntu.com/security/notices/USN-5477-1" }, { "url": "https://ubuntu.com/security/notices/USN-6099-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-39537" } ], "published": "2021-09-20T16:15:12+00:00", "updated": "2026-07-27T13:43:06+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2021-3997", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2021-3997" }, { "url": "https://access.redhat.com/security/cve/CVE-2021-3997" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024639" }, { "url": "https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3997" }, { "url": "https://security.gentoo.org/glsa/202305-15" }, { "url": "https://ubuntu.com/security/notices/USN-5226-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-3997" }, { "url": "https://www.openwall.com/lists/oss-security/2022/01/10/2" } ], "published": "2022-08-23T20:15:08+00:00", "updated": "2026-06-17T04:06:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "239-82.el8_10.17", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2021-4209", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2021-4209" }, { "url": "https://access.redhat.com/security/cve/CVE-2021-4209" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044156" }, { "url": "https://gitlab.com/gnutls/gnutls/-/commit/3db352734472d851318944db13be73da61300568" }, { "url": "https://gitlab.com/gnutls/gnutls/-/issues/1306" }, { "url": "https://gitlab.com/gnutls/gnutls/-/merge_requests/1503" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4209" }, { "url": "https://security.netapp.com/advisory/ntap-20220915-0005/" }, { "url": "https://ubuntu.com/security/notices/USN-5550-1" }, { "url": "https://ubuntu.com/security/notices/USN-5750-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-4209" } ], "published": "2022-08-24T16:15:09+00:00", "updated": "2026-06-17T04:19:13+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.16-8.el8_10.6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2022-0391", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 5, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 74 ], "description": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2022-0391" }, { "url": "https://access.redhat.com/errata/RHSA-2022:6457" }, { "url": "https://access.redhat.com/security/cve/CVE-2022-0391" }, { "url": "https://bugs.python.org/issue43882" }, { "url": "https://bugzilla.redhat.com/2047376" }, { "url": "https://bugzilla.redhat.com/2075390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995162" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995234" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2006792" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2032569" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2036020" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2047376" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3733" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43818" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391" }, { "url": "https://errata.almalinux.org/8/ALSA-2022-6457.html" }, { "url": "https://errata.rockylinux.org/RLSA-2022:1821" }, { "url": "https://linux.oracle.com/cve/CVE-2022-0391.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2023-3550.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0391" }, { "url": "https://security.gentoo.org/glsa/202305-02" }, { "url": "https://security.netapp.com/advisory/ntap-20220225-0009/" }, { "url": "https://ubuntu.com/security/notices/USN-5342-1" }, { "url": "https://ubuntu.com/security/notices/USN-5342-2" }, { "url": "https://ubuntu.com/security/notices/USN-6891-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-0391" }, { "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" } ], "published": "2022-02-09T23:15:16+00:00", "updated": "2026-06-17T04:20:31+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1", "versions": [ { "version": "20.2.4-9.module+el8.10.0+21329+8d76b841", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4", "versions": [ { "version": "50.3.2-7.module+el8.10.0+23406+03055bfb", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2022-27943", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 4.3, "severity": "medium", "method": "CVSSv2", "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 674 ], "description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2022-27943" }, { "url": "https://access.redhat.com/security/cve/CVE-2022-27943" }, { "url": "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039" }, { "url": "https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=1a770b01ef415e114164b6151d1e55acdee09371" }, { "url": "https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79" }, { "url": "https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=fc968115a742d9e4674d9725ce9c2106b91b6ead" }, { "url": "https://gcc.gnu.org/pipermail/gcc-patches/2022-March/592244.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27943" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=28995" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-27943" } ], "published": "2022-03-26T13:15:07+00:00", "updated": "2026-06-17T04:37:46+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.5.0-28.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libgcc@8.5.0-28.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2022-3219", "ratings": [ { "source": { "name": "nvd" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "redhat" }, "score": 6.2, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2022-3219" }, { "url": "https://access.redhat.com/security/cve/CVE-2022-3219" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127010" }, { "url": "https://dev.gnupg.org/D556" }, { "url": "https://dev.gnupg.org/T5993" }, { "url": "https://marc.info/?l=oss-security&m=165696590211434&w=4" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3219" }, { "url": "https://security.netapp.com/advisory/ntap-20230324-0001/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-3219" } ], "published": "2023-02-23T20:15:12+00:00", "updated": "2026-06-17T04:59:05+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.20-4.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2022-41409", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 190 ], "description": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2022-41409" }, { "url": "https://access.redhat.com/security/cve/CVE-2022-41409" }, { "url": "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35" }, { "url": "https://github.com/PCRE2Project/pcre2/issues/141" }, { "url": "https://github.com/advisories/GHSA-4qfx-v7wh-3q4j" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41409" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-41409" } ], "published": "2023-07-18T14:15:12+00:00", "updated": "2026-06-17T05:03:09+00:00", "affects": [ { "ref": "pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "10.32-3.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/pcre2@10.32-3.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2023-0464", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 295 ], "description": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-0464" }, { "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-0464" }, { "url": "https://bugzilla.redhat.com/2181082" }, { "url": "https://bugzilla.redhat.com/2182561" }, { "url": "https://bugzilla.redhat.com/2182565" }, { "url": "https://bugzilla.redhat.com/2188461" }, { "url": "https://bugzilla.redhat.com/2207947" }, { "url": "https://errata.almalinux.org/9/ALSA-2023-3722.html" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1" }, { "url": "https://github.com/advisories/GHSA-w2w6-xp88-5cvw" }, { "url": "https://linux.oracle.com/cve/CVE-2023-0464.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2023-3722.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0464" }, { "url": "https://security.gentoo.org/glsa/202402-08" }, { "url": "https://security.netapp.com/advisory/ntap-20230406-0006" }, { "url": "https://security.netapp.com/advisory/ntap-20230406-0006/" }, { "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "url": "https://ubuntu.com/security/notices/USN-6039-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.couchbase.com/alerts" }, { "url": "https://www.couchbase.com/alerts/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-0464" }, { "url": "https://www.debian.org/security/2023/dsa-5417" }, { "url": "https://www.openssl.org/news/secadv/20230322.txt" } ], "published": "2023-03-22T17:15:13+00:00", "updated": "2026-06-17T05:25:36+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2023-0465", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 295 ], "description": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-0465" }, { "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-0465" }, { "url": "https://bugzilla.redhat.com/2181082" }, { "url": "https://bugzilla.redhat.com/2182561" }, { "url": "https://bugzilla.redhat.com/2182565" }, { "url": "https://bugzilla.redhat.com/2188461" }, { "url": "https://bugzilla.redhat.com/2207947" }, { "url": "https://errata.almalinux.org/9/ALSA-2023-3722.html" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c" }, { "url": "https://github.com/advisories/GHSA-77f3-6546-6rj7" }, { "url": "https://linux.oracle.com/cve/CVE-2023-0465.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2023-3722.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0465" }, { "url": "https://security.gentoo.org/glsa/202402-08" }, { "url": "https://security.netapp.com/advisory/ntap-20230414-0001" }, { "url": "https://security.netapp.com/advisory/ntap-20230414-0001/" }, { "url": "https://ubuntu.com/security/notices/USN-6039-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-0465" }, { "url": "https://www.debian.org/security/2023/dsa-5417" }, { "url": "https://www.openssl.org/news/secadv/20230328.txt" } ], "published": "2023-03-28T15:15:06+00:00", "updated": "2026-06-17T05:25:36+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2023-0466", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 295 ], "description": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-0466" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/4" }, { "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-0466" }, { "url": "https://bugzilla.redhat.com/2181082" }, { "url": "https://bugzilla.redhat.com/2182561" }, { "url": "https://bugzilla.redhat.com/2182565" }, { "url": "https://bugzilla.redhat.com/2188461" }, { "url": "https://bugzilla.redhat.com/2207947" }, { "url": "https://errata.almalinux.org/9/ALSA-2023-3722.html" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061" }, { "url": "https://github.com/advisories/GHSA-pxvj-4wx4-gv6w" }, { "url": "https://linux.oracle.com/cve/CVE-2023-0466.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2023-3722.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0466" }, { "url": "https://security.gentoo.org/glsa/202402-08" }, { "url": "https://security.netapp.com/advisory/ntap-20230414-0001" }, { "url": "https://security.netapp.com/advisory/ntap-20230414-0001/" }, { "url": "https://ubuntu.com/security/notices/USN-6039-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-0466" }, { "url": "https://www.debian.org/security/2023/dsa-5417" }, { "url": "https://www.openssl.org/news/secadv/20230328.txt" } ], "published": "2023-03-28T15:15:06+00:00", "updated": "2026-06-17T05:25:37+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2023-24056", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-24056" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-24056" }, { "url": "https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059" }, { "url": "https://github.com/pkgconf/pkgconf/tags" }, { "url": "https://nullprogram.com/blog/2023/01/18/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24056" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-24056" } ], "published": "2023-01-22T04:15:11+00:00", "updated": "2026-06-17T05:38:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpkgconf@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.4.2-1.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/pkgconf-m4@1.4.2-1.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "1.4.2-1.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/pkgconf-pkg-config@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.4.2-1.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/pkgconf@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.4.2-1.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpkgconf@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/pkgconf-m4@1.4.2-1.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/pkgconf-pkg-config@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/pkgconf@1.4.2-1.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2023-2650", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 770 ], "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-2650" }, { "url": "http://www.openwall.com/lists/oss-security/2023/05/30/1" }, { "url": "https://access.redhat.com/errata/RHSA-2023:6330" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-2650" }, { "url": "https://bugzilla.redhat.com/1858038" }, { "url": "https://bugzilla.redhat.com/2207947" }, { "url": "https://errata.almalinux.org/9/ALSA-2023-6330.html" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a" }, { "url": "https://github.com/advisories/GHSA-gqxg-9vfr-p9cg" }, { "url": "https://linux.oracle.com/cve/CVE-2023-2650.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2023-6330.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2650" }, { "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009" }, { "url": "https://security.gentoo.org/glsa/202402-08" }, { "url": "https://security.netapp.com/advisory/ntap-20230703-0001/" }, { "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "url": "https://ubuntu.com/security/notices/USN-6119-1" }, { "url": "https://ubuntu.com/security/notices/USN-6188-1" }, { "url": "https://ubuntu.com/security/notices/USN-6672-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-2650" }, { "url": "https://www.debian.org/security/2023/dsa-5417" }, { "url": "https://www.openssl.org/news/secadv/20230530.txt" } ], "published": "2023-05-30T14:15:09+00:00", "updated": "2026-06-17T05:53:06+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2023-39804", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "description": "In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-39804" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-39804" }, { "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079" }, { "url": "https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4" }, { "url": "https://git.savannah.gnu.org/cgit/tar.git/tree/src/xheader.c?h=release_1_34#n1723" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00008.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39804" }, { "url": "https://ubuntu.com/security/notices/USN-6543-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-39804" } ], "published": "2024-03-27T04:15:08+00:00", "updated": "2026-06-17T06:12:52+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2023-4156", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.1, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-4156" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-4156" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2215930" }, { "url": "https://git.savannah.gnu.org/gitweb/?p=gawk.git;a=commitdiff;h=e709eb829448ce040087a3fc5481db6bfcaae212" }, { "url": "https://mail.gnu.org/archive/html/bug-gawk/2022-08/msg00000.html" }, { "url": "https://mail.gnu.org/archive/html/bug-gawk/2022-08/msg00023.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4156" }, { "url": "https://ubuntu.com/security/notices/USN-6373-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4156" } ], "published": "2023-09-25T18:15:11+00:00", "updated": "2026-06-17T06:37:11+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gawk@4.2.1-4.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "4.2.1-4.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gawk@4.2.1-4.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2023-45803", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "ghsa" }, "score": 4.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 4.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 200 ], "description": "urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required by HTTP RFCs. Although this behavior is not specified in the section for redirects, it can be inferred by piecing together information from different sections and we have observed the behavior in other major HTTP client implementations like curl and web browsers. Because the vulnerability requires a previously trusted service to become compromised in order to have an impact on confidentiality we believe the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies, if this is the case then this vulnerability isn't exploitable. Both of the following conditions must be true to be affected by this vulnerability: 1. Using urllib3 and submitting sensitive information in the HTTP request body (such as form data or JSON) and 2. The origin service is compromised and starts redirecting using 301, 302, or 303 to a malicious peer or the redirected-to service becomes compromised. This issue has been addressed in versions 1.26.18 and 2.0.7 and users are advised to update to resolve this issue. Users unable to update should disable redirects for services that aren't expecting to respond with redirects with `redirects=False` and disable automatic redirects with `redirects=False` and handle 301, 302, and 303 redirects manually by stripping the HTTP request body.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-45803" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2968" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-45803" }, { "url": "https://bugzilla.redhat.com/2246840" }, { "url": "https://bugzilla.redhat.com/2257028" }, { "url": "https://bugzilla.redhat.com/2257854" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246840" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803" }, { "url": "https://errata.almalinux.org/8/ALSA-2024-2968.html" }, { "url": "https://errata.rockylinux.org/RLSA-2024:11238" }, { "url": "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2023-212.yaml" }, { "url": "https://github.com/urllib3/urllib3" }, { "url": "https://github.com/urllib3/urllib3/commit/4e50fbc5db74e32cabd5ccc1ab81fc103adfe0b3" }, { "url": "https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9" }, { "url": "https://github.com/urllib3/urllib3/commit/b594c5ceaca38e1ac215f916538fb128e3526a36" }, { "url": "https://github.com/urllib3/urllib3/releases/tag/1.26.18" }, { "url": "https://github.com/urllib3/urllib3/releases/tag/2.0.7" }, { "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4" }, { "url": "https://linux.oracle.com/cve/CVE-2023-45803.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2024-2988.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00020.html" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4R2Y5XK3WALSR3FNAGN7JBYV2B343ZKB" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4R2Y5XK3WALSR3FNAGN7JBYV2B343ZKB/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5F5CUBAN5XMEBVBZPHFITBLMJV5FIJJ5" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5F5CUBAN5XMEBVBZPHFITBLMJV5FIJJ5/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PPDPLM6UUMN55ESPQWJFLLIZY4ZKCNRX" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PPDPLM6UUMN55ESPQWJFLLIZY4ZKCNRX/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45803" }, { "url": "https://ubuntu.com/security/notices/USN-6473-1" }, { "url": "https://ubuntu.com/security/notices/USN-6473-2" }, { "url": "https://ubuntu.com/security/notices/USN-7762-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803" }, { "url": "https://www.rfc-editor.org/rfc/rfc9110.html#name-get" } ], "published": "2023-10-17T20:15:10+00:00", "updated": "2026-06-17T06:29:33+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2023-50495", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2023-50495" }, { "url": "https://access.redhat.com/security/cve/CVE-2023-50495" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/" }, { "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html" }, { "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50495" }, { "url": "https://security.netapp.com/advisory/ntap-20240119-0008/" }, { "url": "https://ubuntu.com/security/notices/USN-6684-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-50495" } ], "published": "2023-12-12T15:15:07+00:00", "updated": "2026-06-17T06:39:44+00:00", "affects": [ { "ref": "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "6.1-10.20180224.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/ncurses@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8?arch=noarch&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2024-0232", "ratings": [ { "source": { "name": "bitnami" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 416 ], "description": "A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-0232" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-0232" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243754" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0232" }, { "url": "https://security.netapp.com/advisory/ntap-20240315-0007/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-0232" } ], "published": "2024-01-16T14:15:48+00:00", "updated": "2026-06-17T06:53:02+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.26.0-20.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2024-0397", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "bitnami" }, "score": 7.4, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 362 ], "description": "A defect was discovered in the Python \u201cssl\u201d module where there is a memory\nrace condition with the ssl.SSLContext methods \u201ccert_store_stats()\u201d and\n\u201cget_ca_certs()\u201d. The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-0397" }, { "url": "http://www.openwall.com/lists/oss-security/2024/06/17/2" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-0397" }, { "url": "https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d" }, { "url": "https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524" }, { "url": "https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e" }, { "url": "https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286" }, { "url": "https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa" }, { "url": "https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab" }, { "url": "https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab%20%283.13%29" }, { "url": "https://github.com/python/cpython/issues/114572" }, { "url": "https://github.com/python/cpython/pull/114573" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0397" }, { "url": "https://security.netapp.com/advisory/ntap-20250411-0006/" }, { "url": "https://ubuntu.com/security/notices/USN-6928-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-0397" } ], "published": "2024-06-17T16:15:10+00:00", "updated": "2026-06-17T06:53:24+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1", "versions": [ { "version": "20.2.4-9.module+el8.10.0+21329+8d76b841", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4", "versions": [ { "version": "50.3.2-7.module+el8.10.0+23406+03055bfb", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2024-0727", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "ghsa" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-0727" }, { "url": "http://www.openwall.com/lists/oss-security/2024/03/11/1" }, { "url": "https://access.redhat.com/errata/RHSA-2024:9088" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-0727" }, { "url": "https://bugzilla.redhat.com/2257571" }, { "url": "https://bugzilla.redhat.com/2258502" }, { "url": "https://bugzilla.redhat.com/2259944" }, { "url": "https://bugzilla.redhat.com/2284243" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257571" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258502" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259944" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284243" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-277137.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-331112.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1298" }, { "url": "https://errata.almalinux.org/9/ALSA-2024-9088.html" }, { "url": "https://errata.rockylinux.org/RLSA-2024:9088" }, { "url": "https://github.com/advisories/GHSA-9v9h-cgj8-h64p" }, { "url": "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2" }, { "url": "https://github.com/github/advisory-database/pull/3472" }, { "url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2" }, { "url": "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a" }, { "url": "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c" }, { "url": "https://github.com/openssl/openssl/pull/23362" }, { "url": "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d" }, { "url": "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8" }, { "url": "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539" }, { "url": "https://linux.oracle.com/cve/CVE-2024-0727.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2024-9088.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727" }, { "url": "https://security.netapp.com/advisory/ntap-20240208-0006" }, { "url": "https://security.netapp.com/advisory/ntap-20240208-0006/" }, { "url": "https://ubuntu.com/security/notices/USN-6622-1" }, { "url": "https://ubuntu.com/security/notices/USN-6632-1" }, { "url": "https://ubuntu.com/security/notices/USN-6709-1" }, { "url": "https://ubuntu.com/security/notices/USN-7018-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-0727" }, { "url": "https://www.openssl.org/news/secadv/20240125.txt" } ], "published": "2024-01-26T09:15:07+00:00", "updated": "2026-06-17T06:54:07+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2024-10524", "ratings": [ { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" } ], "cwes": [ 918 ], "description": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-10524" }, { "url": "http://www.openwall.com/lists/oss-security/2024/11/18/6" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-10524" }, { "url": "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778" }, { "url": "https://github.com/advisories/GHSA-mqrm-h2pw-9j9r" }, { "url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability" }, { "url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10524" }, { "url": "https://seclists.org/oss-sec/2024/q4/107" }, { "url": "https://security.netapp.com/advisory/ntap-20250321-0007" }, { "url": "https://security.netapp.com/advisory/ntap-20250321-0007/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-10524" } ], "published": "2024-11-19T15:15:06+00:00", "updated": "2026-06-17T06:55:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2024-13176", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 385 ], "description": "Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-13176" }, { "url": "http://www.openwall.com/lists/oss-security/2025/01/20/2" }, { "url": "https://access.redhat.com/errata/RHSA-2025:15699" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-13176" }, { "url": "https://bugzilla.redhat.com/2359885" }, { "url": "https://bugzilla.redhat.com/2359888" }, { "url": "https://bugzilla.redhat.com/2359892" }, { "url": "https://bugzilla.redhat.com/2359894" }, { "url": "https://bugzilla.redhat.com/2359895" }, { "url": "https://bugzilla.redhat.com/2359899" }, { "url": "https://bugzilla.redhat.com/2359900" }, { "url": "https://bugzilla.redhat.com/2359902" }, { "url": "https://bugzilla.redhat.com/2359903" }, { "url": "https://bugzilla.redhat.com/2359911" }, { "url": "https://bugzilla.redhat.com/2359918" }, { "url": "https://bugzilla.redhat.com/2359920" }, { "url": "https://bugzilla.redhat.com/2359924" }, { "url": "https://bugzilla.redhat.com/2359928" }, { "url": "https://bugzilla.redhat.com/2359930" }, { "url": "https://bugzilla.redhat.com/2359932" }, { "url": "https://bugzilla.redhat.com/2359934" }, { "url": "https://bugzilla.redhat.com/2359938" }, { "url": "https://bugzilla.redhat.com/2359940" }, { "url": "https://bugzilla.redhat.com/2359943" }, { "url": "https://bugzilla.redhat.com/2359944" }, { "url": "https://bugzilla.redhat.com/2359945" }, { "url": "https://bugzilla.redhat.com/2359947" }, { "url": "https://bugzilla.redhat.com/2359950" }, { "url": "https://bugzilla.redhat.com/2359963" }, { "url": "https://bugzilla.redhat.com/2359964" }, { "url": "https://bugzilla.redhat.com/2359972" }, { "url": "https://bugzilla.redhat.com/2370920" }, { "url": "https://bugzilla.redhat.com/2380264" }, { "url": "https://bugzilla.redhat.com/2380273" }, { "url": "https://bugzilla.redhat.com/2380274" }, { "url": "https://bugzilla.redhat.com/2380278" }, { "url": "https://bugzilla.redhat.com/2380280" }, { "url": "https://bugzilla.redhat.com/2380283" }, { "url": "https://bugzilla.redhat.com/2380284" }, { "url": "https://bugzilla.redhat.com/2380290" }, { "url": "https://bugzilla.redhat.com/2380291" }, { "url": "https://bugzilla.redhat.com/2380295" }, { "url": "https://bugzilla.redhat.com/2380298" }, { "url": "https://bugzilla.redhat.com/2380306" }, { "url": "https://bugzilla.redhat.com/2380308" }, { "url": "https://bugzilla.redhat.com/2380309" }, { "url": "https://bugzilla.redhat.com/2380310" }, { "url": "https://bugzilla.redhat.com/2380312" }, { "url": "https://bugzilla.redhat.com/2380313" }, { "url": "https://bugzilla.redhat.com/2380320" }, { "url": "https://bugzilla.redhat.com/2380321" }, { "url": "https://bugzilla.redhat.com/2380322" }, { "url": "https://bugzilla.redhat.com/2380326" }, { "url": "https://bugzilla.redhat.com/2380327" }, { "url": "https://bugzilla.redhat.com/2380334" }, { "url": "https://bugzilla.redhat.com/2380335" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2338999" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359888" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359895" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359899" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359900" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359902" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359903" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359911" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359918" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359920" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359924" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359928" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359930" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359934" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359938" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359940" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359943" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359944" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359945" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359947" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359950" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359963" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359964" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359972" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370920" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380264" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380273" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380274" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380278" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380280" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380283" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380284" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380290" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380291" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380295" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380298" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380306" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380308" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380309" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380310" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380312" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380313" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380320" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380321" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380322" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380326" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380327" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380334" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380335" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21574" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21575" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21577" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21579" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21580" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21581" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21584" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21585" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21588" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30681" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30682" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30683" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30684" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30685" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30687" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30688" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30689" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30693" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30695" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30696" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30699" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30703" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30704" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30705" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30715" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30721" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30722" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50077" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50078" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50079" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50080" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50081" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50082" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50083" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50084" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50085" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50086" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50087" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50088" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50091" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50092" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50093" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50094" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50096" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50097" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50098" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50099" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50100" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50101" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50102" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50104" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5399" }, { "url": "https://errata.almalinux.org/10/ALSA-2025-15699.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:15699" }, { "url": "https://github.com/advisories/GHSA-r9fv-h47r-823f" }, { "url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844" }, { "url": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467" }, { "url": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902" }, { "url": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65" }, { "url": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f" }, { "url": "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded" }, { "url": "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86" }, { "url": "https://linux.oracle.com/cve/CVE-2024-13176.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2025-16046.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13176" }, { "url": "https://openssl-library.org/news/secadv/20250120.txt" }, { "url": "https://security.netapp.com/advisory/ntap-20250124-0005" }, { "url": "https://security.netapp.com/advisory/ntap-20250124-0005/" }, { "url": "https://security.netapp.com/advisory/ntap-20250418-0010" }, { "url": "https://security.netapp.com/advisory/ntap-20250418-0010/" }, { "url": "https://security.netapp.com/advisory/ntap-20250502-0006" }, { "url": "https://security.netapp.com/advisory/ntap-20250502-0006/" }, { "url": "https://ubuntu.com/security/notices/USN-7264-1" }, { "url": "https://ubuntu.com/security/notices/USN-7278-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-13176" }, { "url": "https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL" } ], "published": "2025-01-20T14:15:26+00:00", "updated": "2026-06-17T07:01:23+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2024-2236", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 385 ], "description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-2236" }, { "url": "https://access.redhat.com/errata/RHSA-2024:9404" }, { "url": "https://access.redhat.com/errata/RHSA-2025:3530" }, { "url": "https://access.redhat.com/errata/RHSA-2025:3534" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-2236" }, { "url": "https://bugzilla.redhat.com/2245218" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2245218" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268268" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236" }, { "url": "https://dev.gnupg.org/T7136" }, { "url": "https://errata.almalinux.org/9/ALSA-2024-9404.html" }, { "url": "https://errata.rockylinux.org/RLSA-2024:9404" }, { "url": "https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt" }, { "url": "https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17" }, { "url": "https://linux.oracle.com/cve/CVE-2024-2236.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2024-9404.html" }, { "url": "https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2236" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2236" } ], "published": "2024-03-06T22:15:57+00:00", "updated": "2026-06-17T07:24:06+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.8.5-7.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2024-2511", "ratings": [ { "source": { "name": "alma" }, "severity": "low" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "low" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "rocky" }, "severity": "low" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 1325 ], "description": "Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-2511" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/08/5" }, { "url": "https://access.redhat.com/errata/RHSA-2024:9333" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-2511" }, { "url": "https://bugzilla.redhat.com/2274020" }, { "url": "https://bugzilla.redhat.com/2281029" }, { "url": "https://bugzilla.redhat.com/2283757" }, { "url": "https://bugzilla.redhat.com/2294581" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274020" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281029" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283757" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294581" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-354112.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-613116.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" }, { "url": "https://errata.almalinux.org/9/ALSA-2024-9333.html" }, { "url": "https://errata.rockylinux.org/RLSA-2024:9333" }, { "url": "https://github.com/advisories/GHSA-299c-jvhc-gxj8" }, { "url": "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce" }, { "url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d" }, { "url": "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08" }, { "url": "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640" }, { "url": "https://linux.oracle.com/cve/CVE-2024-2511.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2024-9333.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2511" }, { "url": "https://security.netapp.com/advisory/ntap-20240503-0013" }, { "url": "https://security.netapp.com/advisory/ntap-20240503-0013/" }, { "url": "https://ubuntu.com/security/notices/USN-6937-1" }, { "url": "https://ubuntu.com/security/notices/USN-7894-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2511" }, { "url": "https://www.openssl.org/news/secadv/20240408.txt" }, { "url": "https://www.openssl.org/news/vulnerabilities.html" } ], "published": "2024-04-08T14:15:07+00:00", "updated": "2026-06-17T07:24:40+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2024-41996", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 295 ], "description": "Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-41996" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-41996" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-089022.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-485750.html" }, { "url": "https://dheatattack.gitlab.io/details/" }, { "url": "https://dheatattack.gitlab.io/faq/" }, { "url": "https://gist.github.com/c0r0n3r/abccc14d4d96c0442f3a77fa5ca255d1" }, { "url": "https://github.com/openssl/openssl/issues/17374" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41996" }, { "url": "https://openssl-library.org/post/2022-10-21-tls-groups-configuration/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-41996" } ], "published": "2024-08-26T06:15:04+00:00", "updated": "2026-06-17T07:48:36+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2024-7592", "ratings": [ { "source": { "name": "alma" }, "severity": "low" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "bitnami" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "low" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 4.8, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "low" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 400, 1333 ], "description": "There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2024-7592" }, { "url": "https://access.redhat.com/errata/RHSA-2025:3634" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-7592" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2305879" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" }, { "url": "https://errata.almalinux.org/9/ALSA-2025-3634.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:3634" }, { "url": "https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621" }, { "url": "https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef" }, { "url": "https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06" }, { "url": "https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a" }, { "url": "https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f" }, { "url": "https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774" }, { "url": "https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1" }, { "url": "https://github.com/python/cpython/issues/123067" }, { "url": "https://github.com/python/cpython/pull/123075" }, { "url": "https://linux.oracle.com/cve/CVE-2024-7592.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2025-3634.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7592" }, { "url": "https://security.netapp.com/advisory/ntap-20241018-0006/" }, { "url": "https://ubuntu.com/security/notices/USN-7015-1" }, { "url": "https://ubuntu.com/security/notices/USN-7015-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-7592" } ], "published": "2024-08-19T19:15:08+00:00", "updated": "2026-06-17T08:20:30+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1", "versions": [ { "version": "20.2.4-9.module+el8.10.0+21329+8d76b841", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4", "versions": [ { "version": "50.3.2-7.module+el8.10.0+23406+03055bfb", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-11468", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 93 ], "description": "When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-11468" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-11468" }, { "url": "https://github.com/python/cpython/commit/003b8315669b9f08b1010a49071f73f15f818094" }, { "url": "https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2" }, { "url": "https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6" }, { "url": "https://github.com/python/cpython/commit/a76e4cd62dd68e7cbe86e37e6ed988495a646b66" }, { "url": "https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0" }, { "url": "https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796" }, { "url": "https://github.com/python/cpython/issues/143935" }, { "url": "https://github.com/python/cpython/pull/143936" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11468" }, { "url": "https://ubuntu.com/security/notices/USN-8018-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-11468" } ], "published": "2026-01-20T22:15:50+00:00", "updated": "2026-06-17T08:30:31+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-12781", "ratings": [ { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "cwes": [ 704 ], "description": "When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python.\u00a0Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-12781" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-12781" }, { "url": "https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b" }, { "url": "https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947" }, { "url": "https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5" }, { "url": "https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76" }, { "url": "https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5" }, { "url": "https://github.com/python/cpython/issues/125346" }, { "url": "https://github.com/python/cpython/pull/141128" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12781" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-12781" } ], "published": "2026-01-21T20:16:04+00:00", "updated": "2026-06-17T08:32:56+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-13151", "ratings": [ { "source": { "name": "alma" }, "severity": "low" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "low" }, { "source": { "name": "oracle-oval" }, "severity": "low" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "low" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 787 ], "description": "Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.", "recommendation": "Upgrade libtasn1 to version 4.13-6.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-13151" }, { "url": "http://www.openwall.com/lists/oss-security/2026/01/08/5" }, { "url": "https://access.redhat.com/errata/RHSA-2026:36728" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-13151" }, { "url": "https://bugzilla.redhat.com/2427698" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427698" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-36728.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:28253" }, { "url": "https://gitlab.com/gnutls/libtasn1" }, { "url": "https://gitlab.com/gnutls/libtasn1/-/merge_requests/121" }, { "url": "https://linux.oracle.com/cve/CVE-2025-13151.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-36728.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13151" }, { "url": "https://ubuntu.com/security/notices/USN-7954-1" }, { "url": "https://ubuntu.com/security/notices/USN-7954-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151" }, { "url": "https://www.kb.cert.org/vuls/id/271649" } ], "published": "2026-01-07T22:15:43+00:00", "updated": "2026-06-17T08:33:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "4.13-5.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libtasn1@4.13-5.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-13462", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 2.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 20, 74, 434 ], "description": "The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-13462" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-13462" }, { "url": "https://github.com/python/cpython/commit/42d754e34c06e57ad6b8e7f92f32af679912d8ab" }, { "url": "https://github.com/python/cpython/commit/72dde1016493c52abe857fc4a7bf6c40138b4114" }, { "url": "https://github.com/python/cpython/commit/7ad3093d76a748af55bdb1d2e8aad3638163b017" }, { "url": "https://github.com/python/cpython/commit/9a23b753552afa28e3a2f4d8863572fc66479406" }, { "url": "https://github.com/python/cpython/commit/ae99fe3a33b43e303a05f012815cef60b611a9c7" }, { "url": "https://github.com/python/cpython/commit/d10950739a78f54d0718d88fb5a868374603c084" }, { "url": "https://github.com/python/cpython/issues/141707" }, { "url": "https://github.com/python/cpython/pull/143934" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EOMI5I66ZMKQ2INNFT6T7IAIKUGPZYIE/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13462" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-13462" } ], "published": "2026-03-12T18:16:21+00:00", "updated": "2026-06-17T08:34:11+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-13837", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 400 ], "description": "When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-13837" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-13837" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/568342cfc8f002d9a15f30238f26b9d2e0e79036" }, { "url": "https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b" }, { "url": "https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70" }, { "url": "https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba" }, { "url": "https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb" }, { "url": "https://github.com/python/cpython/commit/cefee7d118a26ef6cd43db59bb9d98ca9a331111" }, { "url": "https://github.com/python/cpython/issues/119342" }, { "url": "https://github.com/python/cpython/pull/119343" }, { "url": "https://linux.oracle.com/cve/CVE-2025-13837.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13837" }, { "url": "https://ubuntu.com/security/notices/USN-8018-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-13837" } ], "published": "2025-12-01T18:16:04+00:00", "updated": "2026-06-17T08:34:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-15282", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 93 ], "description": "User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-15282" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-15282" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/05356b1cc153108aaf27f3b72ce438af4aa218c0" }, { "url": "https://github.com/python/cpython/commit/34d76b00dabde81a793bd06dd8ecb057838c4b38" }, { "url": "https://github.com/python/cpython/commit/3f396ca9d7bbe2a50ea6b8c9b27c0082884d9f80" }, { "url": "https://github.com/python/cpython/commit/4ed11d3cd288e6b90196a15c5a825a45d318fe47" }, { "url": "https://github.com/python/cpython/commit/a35ca3be5842505dab74dc0b90b89cde0405017a" }, { "url": "https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f" }, { "url": "https://github.com/python/cpython/issues/143925" }, { "url": "https://github.com/python/cpython/pull/143926" }, { "url": "https://linux.oracle.com/cve/CVE-2025-15282.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15282" }, { "url": "https://ubuntu.com/security/notices/USN-8018-1" }, { "url": "https://ubuntu.com/security/notices/USN-8018-3" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-15282" } ], "published": "2026-01-20T22:15:50+00:00", "updated": "2026-06-17T08:37:31+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-15468", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-15468" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-15468" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-rhx3-fg8p-f9m4" }, { "url": "https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65" }, { "url": "https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2" }, { "url": "https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4" }, { "url": "https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7" }, { "url": "https://linux.oracle.com/cve/CVE-2025-15468.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15468" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-15468" } ], "published": "2026-01-27T16:16:14+00:00", "updated": "2026-06-17T08:37:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-15469", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 347 ], "description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-15469" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-15469" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-v2vr-926q-29fr" }, { "url": "https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f" }, { "url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61" }, { "url": "https://linux.oracle.com/cve/CVE-2025-15469.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15469" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-15469" } ], "published": "2026-01-27T16:16:14+00:00", "updated": "2026-06-17T08:37:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-1795", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "low" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 3.1, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 116 ], "description": "During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-1795" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-1795" }, { "url": "https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48" }, { "url": "https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593" }, { "url": "https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74" }, { "url": "https://github.com/python/cpython/commit/a4ef689ce670684ec132204b1cd03720c8e0a03d" }, { "url": "https://github.com/python/cpython/commit/d4df3c55e4c5513947f907f24766b34d2ae8c090" }, { "url": "https://github.com/python/cpython/issues/100884" }, { "url": "https://github.com/python/cpython/pull/100885" }, { "url": "https://github.com/python/cpython/pull/119099" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1795" }, { "url": "https://ubuntu.com/security/notices/USN-7570-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-1795" } ], "published": "2025-02-28T19:15:36+00:00", "updated": "2026-07-31T14:16:44+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1", "versions": [ { "version": "20.2.4-9.module+el8.10.0+21329+8d76b841", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4", "versions": [ { "version": "50.3.2-7.module+el8.10.0+23406+03055bfb", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4", "versions": [ { "version": "3.9.25-2.module+el8.10.0+23718+1842ae33", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-devel@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-libs@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-pip-wheel@20.2.4-9.module%2Bel8.10.0%2B21329%2B8d76b841?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020240214182535%3A7044f6c1" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39-setuptools-wheel@50.3.2-7.module%2Bel8.10.0%2B23406%2B03055bfb?arch=noarch&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020250806092742%3Ad47b87a4" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python39@3.9.25-2.module%2Bel8.10.0%2B23718%2B1842ae33?arch=x86_64&distro=redhat-8.10&modularitylabel=python39%3A3.9%3A8100020251126112422%3Ad47b87a4" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-28164", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 401, 120 ], "description": "Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-28164" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-28164" }, { "url": "https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20" }, { "url": "https://github.com/pnggroup/libpng/issues/655" }, { "url": "https://github.com/pnggroup/libpng/pull/657" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-28164" }, { "url": "https://ubuntu.com/security/notices/USN-7993-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-28164" } ], "published": "2026-01-27T16:16:14+00:00", "updated": "2026-06-17T09:04:37+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-30258", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 2.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 754 ], "description": "In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a \"verification DoS.\"", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-30258" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-30258" }, { "url": "https://dev.gnupg.org/T7527" }, { "url": "https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158" }, { "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30258" }, { "url": "https://ubuntu.com/security/notices/USN-7412-1" }, { "url": "https://ubuntu.com/security/notices/USN-7412-3" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-30258" } ], "published": "2025-03-19T20:15:20+00:00", "updated": "2026-06-17T09:08:24+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.20-4.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-4516", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 416 ], "description": "There is an issue in CPython when using `bytes.decode(\"unicode_escape\", error=\"ignore|replace\")`. If you are not using the \"unicode_escape\" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-4516" }, { "url": "http://www.openwall.com/lists/oss-security/2025/05/16/4" }, { "url": "http://www.openwall.com/lists/oss-security/2025/05/19/1" }, { "url": "https://access.redhat.com/errata/RHSA-2025:23530" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-4516" }, { "url": "https://bugzilla.redhat.com/2294682" }, { "url": "https://bugzilla.redhat.com/2321440" }, { "url": "https://bugzilla.redhat.com/2325776" }, { "url": "https://bugzilla.redhat.com/2343237" }, { "url": "https://bugzilla.redhat.com/2366509" }, { "url": "https://bugzilla.redhat.com/2370010" }, { "url": "https://bugzilla.redhat.com/2370014" }, { "url": "https://bugzilla.redhat.com/2370016" }, { "url": "https://bugzilla.redhat.com/2372426" }, { "url": "https://bugzilla.redhat.com/2373234" }, { "url": "https://bugzilla.redhat.com/2402342" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294682" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2321440" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2325776" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2343237" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366509" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370010" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370014" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370016" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372426" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402342" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11168" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5642" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4516" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" }, { "url": "https://errata.almalinux.org/8/ALSA-2025-23530.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:23530" }, { "url": "https://github.com/python/cpython/commit/4398b788ffc1f954a2c552da285477d42a571292" }, { "url": "https://github.com/python/cpython/commit/5646648678295a44aa82636c6e92826651baf33a" }, { "url": "https://github.com/python/cpython/commit/6279eb8c076d89d3739a6edb393e43c7929b429d" }, { "url": "https://github.com/python/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142" }, { "url": "https://github.com/python/cpython/commit/73b3040f592436385007918887b7e2132aa8431f" }, { "url": "https://github.com/python/cpython/commit/8d35fd1b34935221aff23a1ab69a429dd156be77" }, { "url": "https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e" }, { "url": "https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e%20%28main%29" }, { "url": "https://github.com/python/cpython/commit/ab9893c40609935e0d40a6d2a7307ea51aec598b" }, { "url": "https://github.com/python/cpython/issues/133767" }, { "url": "https://github.com/python/cpython/pull/129648" }, { "url": "https://linux.oracle.com/cve/CVE-2025-4516.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2025-23530.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4516" }, { "url": "https://ubuntu.com/security/notices/USN-7570-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4516" } ], "published": "2025-05-15T14:15:31+00:00", "updated": "2026-07-31T14:16:44+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-45582", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.6, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 24 ], "description": "GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of \"Member name contains '..'\" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain \"x -> ../../../../../home/victim/.ssh\" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which \"tar xf\" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each \"tar xf\" in its Security Rules of Thumb; however, third-party advice leads users to run \"tar xf\" more than once into the same directory.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-45582" }, { "url": "http://www.openwall.com/lists/oss-security/2025/11/01/6" }, { "url": "https://access.redhat.com/errata/RHSA-2026:0067" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-45582" }, { "url": "https://bugzilla.redhat.com/2379592" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379592" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-45582" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-0067.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:0067" }, { "url": "https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md" }, { "url": "https://linux.oracle.com/cve/CVE-2025-45582.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-0067.html" }, { "url": "https://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45582" }, { "url": "https://ubuntu.com/security/notices/USN-8510-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-45582" }, { "url": "https://www.gnu.org/software/tar/" }, { "url": "https://www.gnu.org/software/tar/manual/html_node/Integrity.html" }, { "url": "https://www.gnu.org/software/tar/manual/html_node/Integrity.html#Integrity" }, { "url": "https://www.gnu.org/software/tar/manual/html_node/Security-rules-of-thumb.html" } ], "published": "2025-07-11T17:15:37+00:00", "updated": "2026-06-17T09:25:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-4598", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 364 ], "description": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-4598" }, { "url": "http://seclists.org/fulldisclosure/2025/Jun/9" }, { "url": "http://www.openwall.com/lists/oss-security/2025/06/05/1" }, { "url": "http://www.openwall.com/lists/oss-security/2025/06/05/3" }, { "url": "http://www.openwall.com/lists/oss-security/2025/08/18/3" }, { "url": "https://access.redhat.com/errata/RHSA-2025:22660" }, { "url": "https://access.redhat.com/errata/RHSA-2025:22868" }, { "url": "https://access.redhat.com/errata/RHSA-2025:23227" }, { "url": "https://access.redhat.com/errata/RHSA-2025:23234" }, { "url": "https://access.redhat.com/errata/RHSA-2026:0414" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1652" }, { "url": "https://access.redhat.com/errata/RHSA-2026:18153" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-4598" }, { "url": "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598" }, { "url": "https://bugzilla.redhat.com/2369242" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369242" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598" }, { "url": "https://errata.almalinux.org/9/ALSA-2025-22660.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:22660" }, { "url": "https://git.kernel.org/linus/b5325b2a270fcaf7b2a9a0f23d422ca8a5a8bdea" }, { "url": "https://github.com/systemd/systemd/commit/0c49e0049b7665bb7769a13ef346fef92e1ad4d6%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/13902e025321242b1d95c6d8b4e482b37f58cdef%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/49f1f2d4a7612bbed5211a73d11d6a94fbe3bb69%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/76e0ab49c47965877c19772a2b3bf55f6417ca39%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/868d95577ec9f862580ad365726515459be582fc%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/8fc7b2a211eb13ef1a94250b28e1c79cab8bdcb9%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/9ce8e3e449def92c75ada41b7d10c5bc3946be77%20%28main%29" }, { "url": "https://github.com/systemd/systemd/commit/e6a8687b939ab21854f12f59a3cce703e32768cf%20%28main%29" }, { "url": "https://linux.oracle.com/cve/CVE-2025-4598.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-18153.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4598" }, { "url": "https://ubuntu.com/security/notices/USN-7559-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4598" }, { "url": "https://www.openwall.com/lists/oss-security/2025/05/29/3" }, { "url": "https://www.openwall.com/lists/oss-security/2025/08/18/3" }, { "url": "https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt" } ], "published": "2025-05-30T14:15:23+00:00", "updated": "2026-06-30T11:16:22+00:00", "affects": [ { "ref": "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "239-82.el8_10.17", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-50181", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "ghsa" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 601 ], "description": "urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-50181" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-50181" }, { "url": "https://github.com/urllib3/urllib3" }, { "url": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857" }, { "url": "https://github.com/urllib3/urllib3/releases/tag/2.5.0" }, { "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181" }, { "url": "https://ubuntu.com/security/notices/USN-7599-1" }, { "url": "https://ubuntu.com/security/notices/USN-7599-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181" } ], "published": "2025-06-19T01:15:24+00:00", "updated": "2026-06-17T09:34:48+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ] }, { "id": "CVE-2025-50182", "ratings": [ { "source": { "name": "ghsa" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "nvd" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 601 ], "description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means Python libraries can be used to make HTTP requests from a browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects, but the retries and redirect parameters are ignored with Pyodide; the runtime itself determines redirect behavior. This issue has been patched in version 2.5.0.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-50182" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-50182" }, { "url": "https://github.com/urllib3/urllib3" }, { "url": "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f" }, { "url": "https://github.com/urllib3/urllib3/releases/tag/2.5.0" }, { "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50182" }, { "url": "https://ubuntu.com/security/notices/USN-7599-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-50182" } ], "published": "2025-06-19T02:15:17+00:00", "updated": "2026-06-17T09:34:48+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ] }, { "id": "CVE-2025-5278", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "source": { "name": "rocky" }, "severity": "medium" } ], "cwes": [ 121 ], "description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-5278" }, { "url": "http://www.openwall.com/lists/oss-security/2025/05/27/2" }, { "url": "http://www.openwall.com/lists/oss-security/2025/05/29/1" }, { "url": "http://www.openwall.com/lists/oss-security/2025/05/29/2" }, { "url": "https://access.redhat.com/errata/RHSA-2026:28911" }, { "url": "https://access.redhat.com/errata/RHSA-2026:33124" }, { "url": "https://access.redhat.com/errata/RHSA-2026:33313" }, { "url": "https://access.redhat.com/errata/RHSA-2026:33612" }, { "url": "https://access.redhat.com/errata/RHSA-2026:34102" }, { "url": "https://access.redhat.com/errata/RHSA-2026:39981" }, { "url": "https://access.redhat.com/errata/RHSA-2026:44481" }, { "url": "https://access.redhat.com/errata/RHSA-2026:46836" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-5278" }, { "url": "https://bugzilla.redhat.com/2368764" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764" }, { "url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633" }, { "url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278" }, { "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-33124.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:28911" }, { "url": "https://linux.oracle.com/cve/CVE-2025-5278.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-33124.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2025-5278" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-5278" } ], "published": "2025-05-27T21:15:23+00:00", "updated": "2026-08-02T18:16:22+00:00", "affects": [ { "ref": "pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-6069", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 1333 ], "description": "The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-6069" }, { "url": "https://access.redhat.com/errata/RHSA-2025:23530" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-6069" }, { "url": "https://bugzilla.redhat.com/2294682" }, { "url": "https://bugzilla.redhat.com/2321440" }, { "url": "https://bugzilla.redhat.com/2325776" }, { "url": "https://bugzilla.redhat.com/2343237" }, { "url": "https://bugzilla.redhat.com/2366509" }, { "url": "https://bugzilla.redhat.com/2370010" }, { "url": "https://bugzilla.redhat.com/2370014" }, { "url": "https://bugzilla.redhat.com/2370016" }, { "url": "https://bugzilla.redhat.com/2372426" }, { "url": "https://bugzilla.redhat.com/2373234" }, { "url": "https://bugzilla.redhat.com/2402342" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294682" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402342" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5642" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" }, { "url": "https://errata.almalinux.org/8/ALSA-2025-23530.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:23342" }, { "url": "https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949" }, { "url": "https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41" }, { "url": "https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41%20%28main%29" }, { "url": "https://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49" }, { "url": "https://github.com/python/cpython/commit/ab0893fd5c579d9cea30841680e6d35fc478afb5" }, { "url": "https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b" }, { "url": "https://github.com/python/cpython/commit/f3c6f882cddc8dc30320d2e73edf019e201394fc" }, { "url": "https://github.com/python/cpython/commit/fdc9d214c01cb4588f540cfa03726bbf2a33fc15" }, { "url": "https://github.com/python/cpython/issues/135462" }, { "url": "https://github.com/python/cpython/pull/135464" }, { "url": "https://linux.oracle.com/cve/CVE-2025-6069.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2025-23530.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6069" }, { "url": "https://ubuntu.com/security/notices/USN-7710-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-6069" } ], "published": "2025-06-17T14:15:33+00:00", "updated": "2026-07-31T14:16:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-6075", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 400 ], "description": "If the value passed to os.path.expandvars() is user-controlled a \nperformance degradation is possible when expanding environment \nvariables.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-6075" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-6075" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294682" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402342" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5642" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:23342" }, { "url": "https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c" }, { "url": "https://github.com/python/cpython/commit/5dceb93486176e6b4a6d9754491005113eb23427" }, { "url": "https://github.com/python/cpython/commit/631ba3407e3348ccd56ce5160c4fb2c5dc5f4d84" }, { "url": "https://github.com/python/cpython/commit/892747b4cf0f95ba8beb51c0d0658bfaa381ebca" }, { "url": "https://github.com/python/cpython/commit/9ab89c026aa9611c4b0b67c288b8303a480fe742" }, { "url": "https://github.com/python/cpython/commit/c8a5f3435c342964e0a432cc9fb448b7dbecd1ba" }, { "url": "https://github.com/python/cpython/commit/f029e8db626ddc6e3a3beea4eff511a71aaceb5c" }, { "url": "https://github.com/python/cpython/issues/136065" }, { "url": "https://linux.oracle.com/cve/CVE-2025-6075.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6075" }, { "url": "https://ubuntu.com/security/notices/USN-7886-1" }, { "url": "https://ubuntu.com/security/notices/USN-7886-2" }, { "url": "https://ubuntu.com/security/notices/USN-8614-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-6075" } ], "published": "2025-10-31T17:15:48+00:00", "updated": "2026-07-31T14:16:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-64118", "ratings": [ { "source": { "name": "redhat" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "cwes": [ 362, 367 ], "description": "node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-64118" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-64118" }, { "url": "https://github.com/isaacs/node-tar" }, { "url": "https://github.com/isaacs/node-tar/commit/5330eb04bc43014f216e5c271b40d5c00d45224d" }, { "url": "https://github.com/isaacs/node-tar/commit/5e1a8e638600d3c3a2969b4de6a6ec44fa8d74c9" }, { "url": "https://github.com/isaacs/node-tar/issues/445" }, { "url": "https://github.com/isaacs/node-tar/pull/446" }, { "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-29xp-372q-xqph" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64118" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-64118" } ], "published": "2025-10-30T18:15:33+00:00", "updated": "2026-06-17T09:53:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-64505", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-64505" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-64505" }, { "url": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37" }, { "url": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37%20%28v1.6.51%29" }, { "url": "https://github.com/pnggroup/libpng/pull/748" }, { "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64505" }, { "url": "https://ubuntu.com/security/notices/USN-7924-1" }, { "url": "https://ubuntu.com/security/notices/USN-8081-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505" }, { "url": "https://www.openwall.com/lists/oss-security/2025/11/22/1" } ], "published": "2025-11-25T00:15:47+00:00", "updated": "2026-06-17T09:54:28+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-64506", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-64506" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-64506" }, { "url": "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821" }, { "url": "https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821%20%28v1.6.51%29" }, { "url": "https://github.com/pnggroup/libpng/pull/749" }, { "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64506" }, { "url": "https://ubuntu.com/security/notices/USN-7924-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-64506" }, { "url": "https://www.openwall.com/lists/oss-security/2025/11/22/1" } ], "published": "2025-11-25T00:15:47+00:00", "updated": "2026-06-17T09:54:28+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-66382", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 2.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 407 ], "description": "In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-66382" }, { "url": "http://www.openwall.com/lists/oss-security/2025/12/02/1" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-66382" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html" }, { "url": "https://github.com/libexpat/libexpat/issues/1076" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66382" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-66382" } ], "published": "2025-11-28T07:15:57+00:00", "updated": "2026-06-17T09:56:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-68160", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 787 ], "description": "Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-68160" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-68160" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-g78j-46j5-97cr" }, { "url": "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad" }, { "url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6" }, { "url": "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c" }, { "url": "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0" }, { "url": "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096" }, { "url": "https://linux.oracle.com/cve/CVE-2025-68160.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68160" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-68160" } ], "published": "2026-01-27T16:16:15+00:00", "updated": "2026-06-17T09:58:39+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-68972", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "nvd" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" } ], "cwes": [ 347 ], "description": "In GnuPG through 2.4.8, if a signed message has \\f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an \"invalid armor\" message is printed during verification). This is related to use of \\f as a marker to denote truncation of a long plaintext line.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-68972" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-68972" }, { "url": "https://github.com/advisories/GHSA-w789-3q45-984r" }, { "url": "https://gpg.fail/formfeed" }, { "url": "https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i" }, { "url": "https://news.ycombinator.com/item?id=46404339" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68972" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-68972" } ], "published": "2025-12-27T23:15:40+00:00", "updated": "2026-06-17T09:59:55+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.20-4.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-69418", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 325 ], "description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-69418" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-69418" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-78qr-24v5-7q73" }, { "url": "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc" }, { "url": "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8" }, { "url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347" }, { "url": "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae" }, { "url": "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977" }, { "url": "https://linux.oracle.com/cve/CVE-2025-69418.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69418" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-69418" } ], "published": "2026-01-27T16:16:33+00:00", "updated": "2026-06-17T10:00:39+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-69420", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 754 ], "description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-69420" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-69420" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-w42r-ph9f-9x66" }, { "url": "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9" }, { "url": "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a" }, { "url": "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e" }, { "url": "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b" }, { "url": "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085" }, { "url": "https://linux.oracle.com/cve/CVE-2025-69420.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69420" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-69420" } ], "published": "2026-01-27T16:16:34+00:00", "updated": "2026-06-17T10:00:40+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-69421", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-69421" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-69421" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-w9rv-xc8m-cmqp" }, { "url": "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b" }, { "url": "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7" }, { "url": "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd" }, { "url": "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3" }, { "url": "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c" }, { "url": "https://linux.oracle.com/cve/CVE-2025-69421.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69421" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-69421" } ], "published": "2026-01-27T16:16:34+00:00", "updated": "2026-06-17T10:00:40+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-70873", "ratings": [ { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "bitnami" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], "cwes": [ 244 ], "description": "An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-70873" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-70873" }, { "url": "https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-70873" }, { "url": "https://sqlite.org/forum/forumpost/761eac3c82" }, { "url": "https://sqlite.org/src/info/3d459f1fb1bd1b5e" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-70873" } ], "published": "2026-03-12T19:16:15+00:00", "updated": "2026-06-17T10:03:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.26.0-20.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2025-8291", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 1285 ], "description": "The 'zipfile' module would not check the validity of the ZIP64 End of\nCentral Directory (EOCD) Locator record offset value would not be used to\nlocate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be\nassumed to be the previous record in the ZIP archive. This could be abused\nto create ZIP archives that are handled differently by the 'zipfile' module\ncompared to other ZIP implementations.\n\n\nRemediation maintains this behavior, but checks that the offset specified\nin the ZIP64 EOCD Locator record matches the expected value.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-8291" }, { "url": "https://access.redhat.com/errata/RHSA-2026:0123" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-8291" }, { "url": "https://bugzilla.redhat.com/2402342" }, { "url": "https://bugzilla.redhat.com/2418655" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294682" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402342" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5642" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-0123.html" }, { "url": "https://errata.rockylinux.org/RLSA-2025:23342" }, { "url": "https://github.com/google/security-research/security/advisories/GHSA-hhv7-p4pg-wm6p" }, { "url": "https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2025-12.json" }, { "url": "https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267" }, { "url": "https://github.com/python/cpython/commit/1d29afb0d6218aa8fb5e1e4a6133a4778d89bb46" }, { "url": "https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6" }, { "url": "https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196" }, { "url": "https://github.com/python/cpython/commit/8392b2f0d35678407d9ce7d95655a5b77de161b4" }, { "url": "https://github.com/python/cpython/commit/bca11ae7d575d87ed93f5dd6a313be6246e3e388" }, { "url": "https://github.com/python/cpython/commit/d11e69d6203080e3ec450446bfed0516727b85c3" }, { "url": "https://github.com/python/cpython/issues/139700" }, { "url": "https://github.com/python/cpython/pull/139702" }, { "url": "https://linux.oracle.com/cve/CVE-2025-8291.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-0123.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8291" }, { "url": "https://ubuntu.com/security/notices/USN-7886-1" }, { "url": "https://ubuntu.com/security/notices/USN-7886-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-8291" } ], "published": "2025-10-07T18:16:00+00:00", "updated": "2026-07-31T14:16:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2025-9403", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "cwes": [ 617 ], "description": "A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2025-9403" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-9403" }, { "url": "https://drive.google.com/file/d/1r8m9PhU_rk-QPj6OMcs415FcvWPD-zJY/view?usp=sharing" }, { "url": "https://github.com/jqlang/jq/issues/3393" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9403" }, { "url": "https://vuldb.com/?ctiid.321239" }, { "url": "https://vuldb.com/?id.321239" }, { "url": "https://vuldb.com/?submit.633170" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-9403" } ], "published": "2025-08-25T03:15:37+00:00", "updated": "2026-06-17T10:08:53+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-0672", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 4.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 93 ], "description": "When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-0672" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-0672" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172" }, { "url": "https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440" }, { "url": "https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d" }, { "url": "https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca" }, { "url": "https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70" }, { "url": "https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85" }, { "url": "https://github.com/python/cpython/issues/143919" }, { "url": "https://github.com/python/cpython/pull/143920" }, { "url": "https://linux.oracle.com/cve/CVE-2026-0672.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0672" }, { "url": "https://ubuntu.com/security/notices/USN-8018-1" }, { "url": "https://ubuntu.com/security/notices/USN-8018-3" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-0672" } ], "published": "2026-01-20T22:15:52+00:00", "updated": "2026-06-17T10:11:11+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-11850", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 191 ], "description": "An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.\nThe attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-11850" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25520" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-11850" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459970" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11850" }, { "url": "https://ubuntu.com/security/notices/USN-8585-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11850" } ], "published": "2026-06-11T10:16:21+00:00", "updated": "2026-06-17T10:14:30+00:00", "affects": [ { "ref": "pkg:rpm/redhat/krb5-libs@1.18.2-34.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.18.2-34.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/krb5-libs@1.18.2-34.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-11972", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 252, 606, 770 ], "description": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-11972" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-11972" }, { "url": "https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9" }, { "url": "https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365" }, { "url": "https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21" }, { "url": "https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec" }, { "url": "https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192" }, { "url": "https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896" }, { "url": "https://github.com/python/cpython/issues/151981" }, { "url": "https://github.com/python/cpython/pull/151982" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11972" } ], "published": "2026-06-23T23:16:49+00:00", "updated": "2026-07-23T19:16:53+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-13346", "ratings": [ { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L" } ], "cwes": [ 36 ], "description": "pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.\n\n\n\n\nThis vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-13346" }, { "url": "http://www.openwall.com/lists/oss-security/2026/07/29/7" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-13346" }, { "url": "https://github.com/pypa/pip/pull/14110" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13346" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13346" } ], "published": "2026-07-29T19:16:44+00:00", "updated": "2026-07-30T16:43:03+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-13595", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" } ], "cwes": [ 416 ], "description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-13595" }, { "url": "https://access.redhat.com/errata/RHSA-2026:26573" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-13595" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494101" }, { "url": "https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13595" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13595" } ], "published": "2026-06-29T09:16:28+00:00", "updated": "2026-07-08T03:37:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-13757", "ratings": [ { "source": { "name": "redhat" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-13757" }, { "url": "https://access.redhat.com/errata/RHSA-2026:37469" }, { "url": "https://access.redhat.com/errata/RHSA-2026:38342" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-13757" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494556" }, { "url": "https://github.com/advisories/GHSA-p2wm-69qx-x25w" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13757" } ], "published": "2026-06-29T19:16:40+00:00", "updated": "2026-07-13T06:16:24+00:00", "affects": [ { "ref": "pkg:rpm/redhat/p11-kit-trust@0.23.22-2.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "0.23.22-2.el8", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/p11-kit@0.23.22-2.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "0.23.22-2.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/p11-kit-trust@0.23.22-2.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/p11-kit@0.23.22-2.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-1502", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 4.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 93 ], "description": "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-1502" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/11/4" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-1502" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69" }, { "url": "https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53" }, { "url": "https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e" }, { "url": "https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd" }, { "url": "https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed" }, { "url": "https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec" }, { "url": "https://github.com/python/cpython/issues/146211" }, { "url": "https://github.com/python/cpython/pull/146212" }, { "url": "https://linux.oracle.com/cve/CVE-2026-1502.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1502" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-1502" } ], "published": "2026-04-10T18:16:40+00:00", "updated": "2026-06-30T16:16:48+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-15146", "ratings": [ { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "description": "GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget\u2019s data connection to an arbitrary IP address and port. This allows an attacker to forge server-side requests (SSRF) from the machine running Wget, potentially accessing localhost services or internal network resources.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-15146" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-15146" }, { "url": "https://cgit.git.savannah.gnu.org/cgit/wget.git/commit/?id=4f85853f641863d5915786a8413e1a213726a62b" }, { "url": "https://kb.cert.org/vuls/id/564823" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15146" }, { "url": "https://ubuntu.com/security/notices/USN-8572-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15146" }, { "url": "https://www.kb.cert.org/vuls/id/564823" } ], "published": "2026-07-10T19:17:20+00:00", "updated": "2026-07-15T19:16:57+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-15308", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" } ], "cwes": [ 400 ], "description": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.", "recommendation": "Upgrade platform-python to version 3.6.8-77.el8_10; Upgrade python3-libs to version 3.6.8-77.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-15308" }, { "url": "http://www.openwall.com/lists/oss-security/2026/07/09/4" }, { "url": "https://access.redhat.com/errata/RHSA-2026:39893" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-15308" }, { "url": "https://bugzilla.redhat.com/2498608" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-39893.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:39798" }, { "url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9" }, { "url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced" }, { "url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606" }, { "url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd" }, { "url": "https://github.com/python/cpython/issues/153030" }, { "url": "https://github.com/python/cpython/pull/153031" }, { "url": "https://linux.oracle.com/cve/CVE-2026-15308.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-41949.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15308" } ], "published": "2026-07-09T17:16:58+00:00", "updated": "2026-07-23T19:16:53+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-22020", "ratings": [ { "source": { "name": "redhat" }, "severity": "high" }, { "source": { "name": "rocky" }, "severity": "high" } ], "description": "The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Enhance crypto algorithm support (CVE-2026-22007)\n\n* JDK: Improve Kerberos credentialing (CVE-2026-22013)\n\n* JDK: Enhance Path Factories Redux (CVE-2026-22016)\n\n* JDK: Enhance Zip file reading (CVE-2026-22018)\n\n* JDK: Enhance certificate chain validation (CVE-2026-22021)\n\n* JDK: Updating FreeType 2.14.1 (CVE-2026-23865)\n\n* JDK: Enhance TLS connection handling (CVE-2026-34282)\n\n* JDK: Enhance key generation (CVE-2026-34268)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-22020" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418711" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438542" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448747" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460038" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460039" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460040" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460041" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460042" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460043" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460044" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460045" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22007" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22013" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22016" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22018" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22020" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22021" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23865" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26740" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34268" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34282" }, { "url": "https://errata.rockylinux.org/RLSA-2026:9686" } ], "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-22185", "ratings": [ { "source": { "name": "redhat" }, "score": 6.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125, 191 ], "description": "OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdb_load to crash, leading to a limited denial-of-service condition.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-22185" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-22185" }, { "url": "https://bugs.openldap.org/show_bug.cgi?id=10421" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22185" }, { "url": "https://seclists.org/fulldisclosure/2026/Jan/5" }, { "url": "https://seclists.org/fulldisclosure/2026/Jan/8" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-22185" }, { "url": "https://www.openldap.org/" }, { "url": "https://www.vulncheck.com/advisories/openldap-lmdb-mdb-load-heap-buffer-underflow-in-readline" } ], "published": "2026-01-07T21:16:01+00:00", "updated": "2026-06-17T10:19:30+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.4.46-21.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openldap@2.4.46-21.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-22795", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 754 ], "description": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-22795" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-22795" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-3vqq-45qg-2xf6" }, { "url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4" }, { "url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49" }, { "url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12" }, { "url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e" }, { "url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2" }, { "url": "https://linux.oracle.com/cve/CVE-2026-22795.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22795" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-22795" } ], "published": "2026-01-27T16:16:35+00:00", "updated": "2026-06-17T10:20:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-22796", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 754 ], "description": "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-22796" }, { "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-22796" }, { "url": "https://bugzilla.redhat.com/2430375" }, { "url": "https://bugzilla.redhat.com/2430376" }, { "url": "https://bugzilla.redhat.com/2430377" }, { "url": "https://bugzilla.redhat.com/2430378" }, { "url": "https://bugzilla.redhat.com/2430379" }, { "url": "https://bugzilla.redhat.com/2430380" }, { "url": "https://bugzilla.redhat.com/2430381" }, { "url": "https://bugzilla.redhat.com/2430386" }, { "url": "https://bugzilla.redhat.com/2430387" }, { "url": "https://bugzilla.redhat.com/2430388" }, { "url": "https://bugzilla.redhat.com/2430389" }, { "url": "https://bugzilla.redhat.com/2430390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430375" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430377" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430378" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430379" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "url": "https://errata.almalinux.org/9/ALSA-2026-1473.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:1473" }, { "url": "https://github.com/advisories/GHSA-r9hf-rxjm-gv2f" }, { "url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4" }, { "url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49" }, { "url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12" }, { "url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e" }, { "url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2" }, { "url": "https://linux.oracle.com/cve/CVE-2026-22796.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50081.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22796" }, { "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "url": "https://ubuntu.com/security/notices/USN-7980-1" }, { "url": "https://ubuntu.com/security/notices/USN-7980-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-22796" } ], "published": "2026-01-27T16:16:35+00:00", "updated": "2026-06-17T10:20:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-2297", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 668 ], "description": "The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-2297" }, { "url": "http://www.openwall.com/lists/oss-security/2026/03/05/6" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-2297" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e" }, { "url": "https://github.com/python/cpython/commit/69ddd9bb2cc4bd69b1565647c18659c6a789ccd9" }, { "url": "https://github.com/python/cpython/commit/876858c9f65d9ab656c7fa639f268ce7856d89dd" }, { "url": "https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e" }, { "url": "https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86" }, { "url": "https://github.com/python/cpython/issues/145506" }, { "url": "https://github.com/python/cpython/pull/145507" }, { "url": "https://linux.oracle.com/cve/CVE-2026-2297.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2297" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-2297" } ], "published": "2026-03-04T23:16:10+00:00", "updated": "2026-06-17T10:30:44+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-23865", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-23865" }, { "url": "http://www.openwall.com/lists/oss-security/2026/03/03/8" }, { "url": "https://access.redhat.com/errata/RHSA-2026:9689" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-23865" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460038" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460039" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460040" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460041" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460042" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460043" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460044" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22007" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22013" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22016" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22018" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22021" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23865" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34268" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34282" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-9689.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:9689" }, { "url": "https://github.com/advisories/GHSA-878v-mxg6-vj8f" }, { "url": "https://gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841c" }, { "url": "https://linux.oracle.com/cve/CVE-2026-23865.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-9693.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23865" }, { "url": "https://sourceforge.net/projects/freetype/files/freetype2/2.14.2" }, { "url": "https://sourceforge.net/projects/freetype/files/freetype2/2.14.2/" }, { "url": "https://ubuntu.com/security/notices/USN-8086-1" }, { "url": "https://ubuntu.com/security/notices/USN-8327-1" }, { "url": "https://ubuntu.com/security/notices/USN-8328-1" }, { "url": "https://ubuntu.com/security/notices/USN-8330-1" }, { "url": "https://ubuntu.com/security/notices/USN-8331-1" }, { "url": "https://ubuntu.com/security/notices/USN-8332-1" }, { "url": "https://ubuntu.com/security/notices/USN-8333-1" }, { "url": "https://ubuntu.com/security/notices/USN-8334-1" }, { "url": "https://ubuntu.com/security/notices/USN-8339-1" }, { "url": "https://ubuntu.com/security/notices/USN-8341-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-23865" }, { "url": "https://www.facebook.com/security/advisories/cve-2026-23865" }, { "url": "https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixJAVA" } ], "published": "2026-03-02T17:16:32+00:00", "updated": "2026-06-17T10:22:13+00:00", "affects": [ { "ref": "pkg:rpm/redhat/freetype@2.9.1-10.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.9.1-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/freetype@2.9.1-10.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-24515", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 2.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "nvd" }, "score": 2.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 2.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 476 ], "description": "In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-24515" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-24515" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html" }, { "url": "https://github.com/libexpat/libexpat/pull/1131" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24515" }, { "url": "https://ubuntu.com/security/notices/USN-8022-1" }, { "url": "https://ubuntu.com/security/notices/USN-8022-2" }, { "url": "https://ubuntu.com/security/notices/USN-8023-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-24515" } ], "published": "2026-01-23T08:16:01+00:00", "updated": "2026-06-17T10:23:10+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-24883", "ratings": [ { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "cwes": [ 476 ], "description": "In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-24883" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-24883" }, { "url": "https://dev.gnupg.org/T8049" }, { "url": "https://github.com/advisories/GHSA-7246-cvp4-g68w" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24883" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-24883" }, { "url": "https://www.openwall.com/lists/oss-security/2026/01/27/8" } ], "published": "2026-01-27T19:16:16+00:00", "updated": "2026-06-17T10:23:44+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.20-4.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-25068", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 4.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 129 ], "description": "alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-25068" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-25068" }, { "url": "https://github.com/alsa-project/alsa-lib/commit/5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40" }, { "url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00008.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25068" }, { "url": "https://ubuntu.com/security/notices/USN-8044-1" }, { "url": "https://ubuntu.com/security/notices/USN-8044-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-25068" }, { "url": "https://www.vulncheck.com/advisories/alsa-lib-topology-decoder-heap-based-buffer-overflow" } ], "published": "2026-01-29T20:16:10+00:00", "updated": "2026-06-17T10:24:04+00:00", "affects": [ { "ref": "pkg:rpm/redhat/alsa-lib@1.2.10-2.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.2.10-2.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/alsa-lib@1.2.10-2.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-25645", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "ghsa" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], "cwes": [ 377 ], "description": "Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-25645" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-25645" }, { "url": "https://github.com/psf/requests" }, { "url": "https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7" }, { "url": "https://github.com/psf/requests/releases/tag/v2.33.0" }, { "url": "https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25645" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-25645" } ], "published": "2026-03-25T17:16:52+00:00", "updated": "2026-06-17T10:25:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10", "versions": [ { "version": "9.0.3-24.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8?arch=noarch&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-27171", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "cbl-mariner" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 1284 ], "description": "zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-27171" }, { "url": "https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit" }, { "url": "https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/" }, { "url": "https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-27171" }, { "url": "https://github.com/advisories/GHSA-h858-mf2m-8jf4" }, { "url": "https://github.com/madler/zlib/issues/904" }, { "url": "https://github.com/madler/zlib/releases/tag/v1.3.2" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27171" }, { "url": "https://ostif.org/zlib-audit-complete" }, { "url": "https://ostif.org/zlib-audit-complete/" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-27171" } ], "published": "2026-02-18T04:16:01+00:00", "updated": "2026-06-17T10:26:47+00:00", "affects": [ { "ref": "pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.2.11-25.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/zlib@1.2.11-25.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-27456", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "bottlerocket" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "redhat" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 59, 269, 367 ], "description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-27456" }, { "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-27456" }, { "url": "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml" }, { "url": "https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4" }, { "url": "https://github.com/util-linux/util-linux/releases/tag/v2.41.4" }, { "url": "https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27456" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-27456" } ], "published": "2026-04-03T22:16:25+00:00", "updated": "2026-07-24T22:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.32.1-48.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libblkid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libmount@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libuuid@2.32.1-48.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-28387", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 8.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "nvd" }, "score": 8.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 416 ], "description": "Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-28387" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-28387" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28387" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8155-1" }, { "url": "https://ubuntu.com/security/notices/USN-8155-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28387" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/07/11" } ], "published": "2026-04-07T22:16:20+00:00", "updated": "2026-07-24T23:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-28388", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-28388" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-28388" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28388" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8155-1" }, { "url": "https://ubuntu.com/security/notices/USN-8155-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28388" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/07/11" } ], "published": "2026-04-07T22:16:20+00:00", "updated": "2026-07-24T23:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-28389", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-28389" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-28389" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://github.com/advisories/GHSA-7x88-9hgc-69gf" }, { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28389" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8155-1" }, { "url": "https://ubuntu.com/security/notices/USN-8155-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28389" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/07/11" } ], "published": "2026-04-07T22:16:21+00:00", "updated": "2026-07-24T23:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-28390", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "recommendation": "Upgrade openssl-libs to version 1:1.1.1k-17.el8_6", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-28390" }, { "url": "https://access.redhat.com/errata/RHSA-2026:38503" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-28390" }, { "url": "https://bugzilla.redhat.com/2456314" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-38503.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:22312" }, { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://linux.oracle.com/cve/CVE-2026-28390.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50345.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8155-1" }, { "url": "https://ubuntu.com/security/notices/USN-8155-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-28390" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/07/11" } ], "published": "2026-04-07T22:16:21+00:00", "updated": "2026-07-24T23:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-29111", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "cbl-mariner" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 7.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 269 ], "description": "systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this is not possible as the safety check causes an assert instead. This IPC call was added in v239, so versions older than that are not affected. Versions 260-rc1, 259.2, 258.5, and 257.11 contain patches. No known workarounds are available.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-29111" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19068" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-29111" }, { "url": "https://bugzilla.redhat.com/2450505" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450505" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29111" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-19068.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19213" }, { "url": "https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a" }, { "url": "https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6" }, { "url": "https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412" }, { "url": "https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd" }, { "url": "https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f" }, { "url": "https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f" }, { "url": "https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69" }, { "url": "https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6" }, { "url": "https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c" }, { "url": "https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8" }, { "url": "https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764" }, { "url": "https://linux.oracle.com/cve/CVE-2026-29111.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19213.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29111" }, { "url": "https://ubuntu.com/security/notices/USN-8119-1" }, { "url": "https://ubuntu.com/security/notices/USN-8119-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-29111" } ], "published": "2026-03-23T22:16:26+00:00", "updated": "2026-06-17T10:29:37+00:00", "affects": [ { "ref": "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "239-82.el8_10.17", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-31789", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 9.8, "severity": "critical", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "nvd" }, "score": 9.8, "severity": "critical", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "photon" }, "severity": "critical" }, { "source": { "name": "redhat" }, "score": 5.8, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 787 ], "description": "Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-31789" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-31789" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://github.com/advisories/GHSA-j79m-9jxq-788r" }, { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31789" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8155-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-31789" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/07/11" } ], "published": "2026-04-07T22:16:21+00:00", "updated": "2026-07-24T23:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-32316", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 122, 190 ], "description": "jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, resulting in a drastically undersized heap buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap buffer overflow classified as CWE-190 (Integer Overflow) leading to CWE-122 (Heap-based Buffer Overflow). Any system evaluating untrusted jq queries is affected, as an attacker can crash the process or potentially achieve further exploitation through heap corruption by crafting queries that produce extremely large strings. The root cause is the absence of string size bounds checking, unlike arrays and objects which already have size limits. The issue has been addressed in commit e47e56d226519635768e6aab2f38f0ab037c09e5.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-32316" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-32316" }, { "url": "https://github.com/jqlang/jq/commit/e47e56d226519635768e6aab2f38f0ab037c09e5" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-q3h9-m34w-h76f" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32316" }, { "url": "https://ubuntu.com/security/notices/USN-8202-1" }, { "url": "https://ubuntu.com/security/notices/USN-8202-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32316" } ], "published": "2026-04-13T18:16:29+00:00", "updated": "2026-06-17T10:35:33+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-3276", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 407 ], "description": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-3276" }, { "url": "http://www.openwall.com/lists/oss-security/2026/06/03/15" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-3276" }, { "url": "https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0" }, { "url": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598" }, { "url": "https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f" }, { "url": "https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32" }, { "url": "https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066" }, { "url": "https://github.com/python/cpython/issues/149079" }, { "url": "https://github.com/python/cpython/pull/149080" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3276" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3276" }, { "url": "https://www.openwall.com/lists/oss-security/2026/06/03/15" } ], "published": "2026-06-03T16:16:29+00:00", "updated": "2026-07-22T19:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-32776", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 476 ], "description": "libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-32776" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-32776" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://github.com/libexpat/libexpat/pull/1158" }, { "url": "https://github.com/libexpat/libexpat/pull/1159" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32776" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32776" } ], "published": "2026-03-16T14:19:44+00:00", "updated": "2026-07-14T13:18:49+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-32777", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "cwes": [ 835 ], "description": "libexpat before 2.7.5 allows an infinite loop while parsing DTD content.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-32777" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-32777" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://github.com/libexpat/libexpat/issues/1161" }, { "url": "https://github.com/libexpat/libexpat/pull/1159" }, { "url": "https://github.com/libexpat/libexpat/pull/1162" }, { "url": "https://issues.oss-fuzz.com/issues/486993411" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32777" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32777" } ], "published": "2026-03-16T14:19:44+00:00", "updated": "2026-07-14T13:18:49+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-32778", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 476 ], "description": "libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-32778" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-32778" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://github.com/libexpat/libexpat/pull/1159" }, { "url": "https://github.com/libexpat/libexpat/pull/1163" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32778" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32778" } ], "published": "2026-03-16T14:19:44+00:00", "updated": "2026-07-14T13:18:49+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-33056", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "ghsa" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "nvd" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 61 ], "description": "tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses fs::metadata() to check whether a path that already exists is a directory. Because fs::metadata() follows symbolic links, a crafted tarball containing a symlink entry followed by a directory entry with the same name causes the crate to treat the symlink target as a valid existing directory \u2014 and subsequently apply chmod to it. This allows an attacker to modify the permissions of arbitrary directories outside the extraction root. This issue has been fixed in version 0.4.45.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-33056" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-33056" }, { "url": "https://github.com/alexcrichton/tar-rs" }, { "url": "https://github.com/alexcrichton/tar-rs/commit/17b1fd84e632071cb8eef9d3709bf347bd266446" }, { "url": "https://github.com/alexcrichton/tar-rs/security/advisories/GHSA-j4xf-2g29-59ph" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33056" }, { "url": "https://rustsec.org/advisories/RUSTSEC-2026-0067.html" }, { "url": "https://ubuntu.com/security/notices/USN-8138-1" }, { "url": "https://ubuntu.com/security/notices/USN-8139-1" }, { "url": "https://ubuntu.com/security/notices/USN-8168-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33056" } ], "published": "2026-03-20T08:16:11+00:00", "updated": "2026-06-17T10:36:52+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-33416", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "cbl-mariner" }, "severity": "high" }, { "source": { "name": "julia" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 416 ], "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.", "recommendation": "Upgrade libpng to version 2:1.6.34-11.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-33416" }, { "url": "https://access.redhat.com/errata/RHSA-2026:9345" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-33416" }, { "url": "https://bugzilla.redhat.com/2451805" }, { "url": "https://bugzilla.redhat.com/2451819" }, { "url": "https://bugzilla.redhat.com/2455897" }, { "url": "https://bugzilla.redhat.com/2455901" }, { "url": "https://bugzilla.redhat.com/2455908" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451805" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451819" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33416" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33636" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-9345.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:28255" }, { "url": "https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb" }, { "url": "https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667" }, { "url": "https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25" }, { "url": "https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1" }, { "url": "https://github.com/pnggroup/libpng/pull/824" }, { "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j" }, { "url": "https://linux.oracle.com/cve/CVE-2026-33416.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-9693.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33416" }, { "url": "https://ubuntu.com/security/notices/USN-8251-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33416" } ], "published": "2026-03-26T17:16:38+00:00", "updated": "2026-06-17T10:37:27+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ] }, { "id": "CVE-2026-33947", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq's src/jv_aux.c use unbounded recursion whose depth is controlled by the length of a caller-supplied path array, with no depth limit enforced. An attacker can supply a JSON document containing a flat array of ~65,000 integers (~200 KB) that, when used as a path argument by a trusted jq filter, exhausts the C call stack and crashes the process with a segmentation fault (SIGSEGV). This bypass works because the existing MAX_PARSING_DEPTH (10,000) limit only protects the JSON parser, not runtime path operations where arrays can be programmatically constructed to arbitrary lengths. The impact is denial of service (unrecoverable crash) affecting any application or service that processes untrusted JSON input through jq's setpath, getpath, or delpaths builtins. This issue has been addressed in commit fb59f1491058d58bdc3e8dd28f1773d1ac690a1f.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-33947" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/16/1" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-33947" }, { "url": "https://github.com/jqlang/jq/commit/fb59f1491058d58bdc3e8dd28f1773d1ac690a1f" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-xwrw-4f8h-rjvg" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33947" }, { "url": "https://ubuntu.com/security/notices/USN-8202-1" }, { "url": "https://ubuntu.com/security/notices/USN-8202-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33947" } ], "published": "2026-04-13T22:16:29+00:00", "updated": "2026-06-17T10:38:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-33948", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 3.8, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 20, 170 ], "description": "jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine buffer length instead of the actual byte count from fgets(), causing it to truncate input at the first NUL byte and parse only the preceding prefix. This enables an attacker to craft input with a benign JSON prefix before a NUL byte followed by malicious trailing data, where jq validates only the prefix as valid JSON while silently discarding the suffix. Workflows relying on jq to validate untrusted JSON before forwarding it to downstream consumers are susceptible to parser differential attacks, as those consumers may process the full input including the malicious trailing bytes. This issue has been patched by commit 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-33948" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-33948" }, { "url": "https://github.com/jqlang/jq/commit/6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-32cx-cvvh-2wj9" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33948" }, { "url": "https://ubuntu.com/security/notices/USN-8202-1" }, { "url": "https://ubuntu.com/security/notices/USN-8202-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33948" } ], "published": "2026-04-14T00:16:06+00:00", "updated": "2026-06-17T10:38:21+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-34180", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 125 ], "description": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-34180" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34180" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d" }, { "url": "https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83" }, { "url": "https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff" }, { "url": "https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43" }, { "url": "https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16" }, { "url": "https://linux.oracle.com/cve/CVE-2026-34180.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34180" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://ubuntu.com/security/notices/USN-8414-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34180" } ], "published": "2026-06-09T17:17:04+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "CVE-2026-34743", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 5.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 122 ], "description": "XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-34743" }, { "url": "http://www.openwall.com/lists/oss-security/2026/03/31/13" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34743" }, { "url": "https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87" }, { "url": "https://github.com/tukaani-project/xz/releases/tag/v5.8.3" }, { "url": "https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv" }, { "url": "https://lists.debian.org/debian-lts-announce/2026/07/msg00034.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34743" }, { "url": "https://tukaani.org/xz/index-append-overflow.html" }, { "url": "https://ubuntu.com/security/notices/USN-8362-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34743" } ], "published": "2026-04-02T19:21:33+00:00", "updated": "2026-07-24T21:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "5.2.4-4.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-34757", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "julia" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "nvd" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 416 ], "description": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from png_get_PLTE, png_get_tRNS, or png_get_hIST back into the corresponding setter on the same png_struct/png_info pair causes the setter to read from freed memory and copy its contents into the replacement buffer. The setter frees the internal buffer before copying from the caller-supplied pointer, which now dangles. The freed region may contain stale data (producing silently corrupted chunk metadata) or data from subsequent heap allocations (leaking unrelated heap contents into the chunk struct). This vulnerability is fixed in 1.6.57.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-34757" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34757" }, { "url": "https://github.com/pnggroup/libpng/commit/398cbe3df03f4e11bb031e07f416dfdde3684e8a" }, { "url": "https://github.com/pnggroup/libpng/commit/55d20aaa322c9274491cda82c5cd4f99b48c6bcc" }, { "url": "https://github.com/pnggroup/libpng/issues/836" }, { "url": "https://github.com/pnggroup/libpng/issues/837" }, { "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-6fr7-g8h7-v645" }, { "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00017.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34757" }, { "url": "https://ubuntu.com/security/notices/USN-8251-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34757" } ], "published": "2026-04-09T15:16:11+00:00", "updated": "2026-06-17T10:39:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.6.34-10.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libpng@1.6.34-10.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-3479", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], "cwes": [ 22 ], "description": "DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-3479" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-3479" }, { "url": "https://github.com/python/cpython/commit/5af6ce3e7b643a30a02d22245c1e3f4a8bc0a1fe" }, { "url": "https://github.com/python/cpython/commit/bcdf231946b1da8bdfbab4c05539bb0cc964a1c7" }, { "url": "https://github.com/python/cpython/commit/cf59bf76470f3d75ad47d80ffb8ce76b64b5e943" }, { "url": "https://github.com/python/cpython/commit/d786d59a8f7196bb630100a869f28ad13436b59c" }, { "url": "https://github.com/python/cpython/issues/146121" }, { "url": "https://github.com/python/cpython/pull/146122" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3479" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3479" } ], "published": "2026-03-18T19:16:06+00:00", "updated": "2026-06-17T10:43:39+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-3644", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 20, 116 ], "description": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-3644" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-3644" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8" }, { "url": "https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4" }, { "url": "https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd" }, { "url": "https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd" }, { "url": "https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef" }, { "url": "https://github.com/python/cpython/issues/145599" }, { "url": "https://github.com/python/cpython/pull/145600" }, { "url": "https://linux.oracle.com/cve/CVE-2026-3644.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3644" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3644" } ], "published": "2026-03-16T18:16:09+00:00", "updated": "2026-06-30T16:16:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-3832", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 179 ], "description": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-3832" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13274" }, { "url": "https://access.redhat.com/errata/RHSA-2026:20612" }, { "url": "https://access.redhat.com/errata/RHSA-2026:20613" }, { "url": "https://access.redhat.com/errata/RHSA-2026:26319" }, { "url": "https://access.redhat.com/errata/RHSA-2026:26409" }, { "url": "https://access.redhat.com/errata/RHSA-2026:29197" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-3832" }, { "url": "https://bugzilla.redhat.com/2445763" }, { "url": "https://bugzilla.redhat.com/2450624" }, { "url": "https://bugzilla.redhat.com/2450625" }, { "url": "https://bugzilla.redhat.com/2467279" }, { "url": "https://bugzilla.redhat.com/2467289" }, { "url": "https://bugzilla.redhat.com/2467437" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445762" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445763" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450624" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450625" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467441" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467448" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467450" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467451" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467678" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467686" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33845" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33846" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3832" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3833" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42009" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42010" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42011" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42012" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42013" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42014" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42015" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5260" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5419" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-20613.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:20612" }, { "url": "https://gitlab.com/gnutls/gnutls/-/issues/1801" }, { "url": "https://linux.oracle.com/cve/CVE-2026-3832.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50346.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3832" }, { "url": "https://ubuntu.com/security/notices/USN-8284-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3832" }, { "url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-12" } ], "published": "2026-04-30T18:16:30+00:00", "updated": "2026-07-13T17:17:20+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.16-8.el8_10.6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-39822", "source": { "name": "govulndb", "url": "https://pkg.go.dev/vuln/" }, "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 7.8, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.8, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "source": { "name": "rocky" }, "severity": "high" } ], "cwes": [ 61 ], "description": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.", "recommendation": "Upgrade stdlib to version 1.25.12, 1.26.5, 1.27.0-rc.2", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-39822" }, { "url": "https://access.redhat.com/errata/RHSA-2026:38995" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-39822" }, { "url": "https://bugzilla.redhat.com/2480756" }, { "url": "https://bugzilla.redhat.com/2484207" }, { "url": "https://bugzilla.redhat.com/2498152" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-38995.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:38878" }, { "url": "https://go.dev/cl/797880" }, { "url": "https://go.dev/issue/79005" }, { "url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc" }, { "url": "https://linux.oracle.com/cve/CVE-2026-39822.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-38995.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822" }, { "url": "https://pkg.go.dev/vuln/GO-2026-4970" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-39822" } ], "published": "2026-07-08T17:17:21+00:00", "updated": "2026-07-13T14:54:26+00:00", "affects": [ { "ref": "pkg:golang/stdlib@v1.25.11", "versions": [ { "version": "v1.25.11", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:golang/stdlib@v1.25.11" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/stdlib@v1.25.11" } ] }, { "id": "CVE-2026-39956", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125, 476, 843 ], "description": "jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() without verifying they are strings, and jv_string_indexes() in src/jv.c relies solely on assert() checks that are stripped in release builds compiled with -DNDEBUG. This allows an attacker to crash jq trivially with input like _strindices(0), and by crafting a numeric value whose IEEE-754 bit pattern maps to a chosen pointer, achieve a controlled pointer dereference and limited memory read/probe primitive. Any deployment that evaluates untrusted jq filters against a release build is vulnerable. This issue has been patched in commit fdf8ef0f0810e3d365cdd5160de43db46f57ed03.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-39956" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-39956" }, { "url": "https://github.com/jqlang/jq/commit/fdf8ef0f0810e3d365cdd5160de43db46f57ed03" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-6gc3-3g9p-xx28" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39956" }, { "url": "https://ubuntu.com/security/notices/USN-8202-1" }, { "url": "https://ubuntu.com/security/notices/USN-8202-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-39956" } ], "published": "2026-04-13T23:16:27+00:00", "updated": "2026-06-17T10:42:48+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-40612", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 674 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure (built programmatically with reduce, since the JSON parser caps at depth 10000), the C stack is exhausted.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-40612" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-40612" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-r7m6-x9c7-h69j" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40612" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-40612" } ], "published": "2026-05-11T18:16:33+00:00", "updated": "2026-06-17T10:45:32+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-4105", "ratings": [ { "source": { "name": "redhat" }, "score": 6.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], "cwes": [ 284 ], "description": "A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-4105" }, { "url": "https://access.redhat.com/errata/RHSA-2026:7299" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-4105" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447262" }, { "url": "https://github.com/systemd/systemd/security/advisories/GHSA-4h6x-r8vx-3862" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4105" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-4105" } ], "published": "2026-03-13T19:55:13+00:00", "updated": "2026-06-17T10:55:59+00:00", "affects": [ { "ref": "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "239-82.el8_10.17", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/systemd-libs@239-82.el8_10.17?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-41080", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 2.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "cwes": [ 331 ], "description": "libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41080" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/26/1" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41080" }, { "url": "https://blog.hartwork.org/posts/expat-2-8-0-released/" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://github.com/libexpat/libexpat/issues/47" }, { "url": "https://github.com/libexpat/libexpat/pull/1183" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41080" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41080" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/26/1" } ], "published": "2026-04-16T17:16:54+00:00", "updated": "2026-07-14T13:18:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-41256", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 158 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \\x00 and arbitrary suffix compiles and executes as only the prefix before the NUL. This leaves jq with a post-CVE-2026-33948 prefix/full-buffer mismatch on the compilation path even though the JSON parser path has already been fixed.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41256" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41256" }, { "url": "https://github.com/jqlang/jq/commit/5a015deae35d19e3ebbc65db6c157a80e76df738" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-vf2h-chrj-q3fg" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41256" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41256" } ], "published": "2026-05-11T18:16:33+00:00", "updated": "2026-06-17T10:46:23+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-41257", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 190, 787 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond \u22481 GiB (via deeply nested generator forks), the doubling arithmetic overflows. The wrapped value is passed to realloc and then used for a memmove with attacker-influenced offsets.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41257" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41257" }, { "url": "https://github.com/jqlang/jq/commit/01b3cded76daacbfddb7f8763700b0803bcb5c6f" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-4jm8-m363-4539" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41257" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41257" } ], "published": "2026-05-11T18:16:34+00:00", "updated": "2026-06-17T10:46:23+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-41989", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 6.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 7.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 787 ], "description": "Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41989" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41989" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://dev.gnupg.org/T8211" }, { "url": "https://github.com/advisories/GHSA-wrv8-79m2-qg24" }, { "url": "https://linux.oracle.com/cve/CVE-2026-41989.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-47117.html" }, { "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41989" }, { "url": "https://ubuntu.com/security/notices/USN-8319-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41989" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/21/1" } ], "published": "2026-04-23T05:16:05+00:00", "updated": "2026-07-14T13:18:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.8.5-7.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-41990", "ratings": [ { "source": { "name": "julia" }, "score": 4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "source": { "name": "redhat" }, "score": 3.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 787 ], "description": "Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41990" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41990" }, { "url": "https://dev.gnupg.org/T8208" }, { "url": "https://github.com/advisories/GHSA-78pv-qq8x-94px" }, { "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41990" }, { "url": "https://ubuntu.com/security/notices/USN-8319-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41990" }, { "url": "https://www.openwall.com/lists/oss-security/2026/04/21/1" } ], "published": "2026-04-23T05:16:05+00:00", "updated": "2026-06-17T10:47:18+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.8.5-7.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libgcrypt@1.8.5-7.el8_6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-41991", "ratings": [ { "source": { "name": "nvd" }, "score": 4.7, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "source": { "name": "redhat" }, "score": 6, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 377 ], "description": "GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user\u2019s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This predictable filename is created without exclusive access or existence checks.\nA local attacker can pre\u2011create the predicted temporary file path as a symbolic link pointing to an arbitrary file writable by the victim. When gzexe runs, it follows the symlink and overwrites the target file, resulting in a time\u2011of\u2011check to time\u2011of\u2011use (TOCTOU) condition that allows arbitrary file overwrite.\n\nThis issue has been fixed in the commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-41991" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-41991" }, { "url": "https://cert.pl/en/posts/2026/04/CVE-2026-41991/" }, { "url": "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41991" }, { "url": "https://ubuntu.com/security/notices/USN-8512-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-41991" }, { "url": "https://www.gnu.org/software/gzip/" } ], "published": "2026-06-29T12:16:29+00:00", "updated": "2026-07-01T14:02:24+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.9-13.el8_5", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gzip@1.9-13.el8_5?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-4224", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-4224" }, { "url": "http://www.openwall.com/lists/oss-security/2026/03/16/4" }, { "url": "https://access.redhat.com/errata/RHSA-2026:10950" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-4224" }, { "url": "https://bugzilla.redhat.com/2395108" }, { "url": "https://bugzilla.redhat.com/2408891" }, { "url": "https://bugzilla.redhat.com/2418084" }, { "url": "https://bugzilla.redhat.com/2431366" }, { "url": "https://bugzilla.redhat.com/2431374" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418084" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431366" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431374" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-10950.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19177" }, { "url": "https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a" }, { "url": "https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785" }, { "url": "https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee" }, { "url": "https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3" }, { "url": "https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768" }, { "url": "https://github.com/python/cpython/issues/145986" }, { "url": "https://github.com/python/cpython/pull/145987" }, { "url": "https://linux.oracle.com/cve/CVE-2026-4224.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19177.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4224" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-4224" } ], "published": "2026-03-16T18:16:10+00:00", "updated": "2026-06-17T10:56:15+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-42250", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 787 ], "description": "bzip2 contains an off\u2011by\u2011one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out\u2011of\u2011bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).\n\nThis issue was fixed in bzip2 patch\u00a035d122a3df8b0cc4082a4d89fdc6ee99f375fe67", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42250" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42250" }, { "url": "https://cert.pl/en/posts/2026/05/CVE-2026-42250/" }, { "url": "https://inbox.sourceware.org/bzip2-devel/20260528145407.293768-1-mark@klomp.org/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42250" }, { "url": "https://sourceware.org/bzip2/" }, { "url": "https://sourceware.org/cgit/bzip2/commit/?id=35d122a3df8b0cc4082a4d89fdc6ee99f375fe67" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42250" } ], "published": "2026-05-28T14:16:19+00:00", "updated": "2026-06-17T10:47:34+00:00", "affects": [ { "ref": "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.0.6-28.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-42308", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "ghsa" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 190 ], "description": "Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42308" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42308" }, { "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-165.yaml" }, { "url": "https://github.com/python-pillow/Pillow" }, { "url": "https://github.com/python-pillow/Pillow/pull/9518/changes%20%28suspected%20fix%29" }, { "url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0" }, { "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308" }, { "url": "https://ubuntu.com/security/notices/USN-8399-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42308" } ], "published": "2026-05-09T06:16:09+00:00", "updated": "2026-07-24T21:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-42505", "source": { "name": "govulndb", "url": "https://pkg.go.dev/vuln/" }, "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "bitnami" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "cwes": [ 201 ], "description": "Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.", "recommendation": "Upgrade stdlib to version 1.25.12, 1.26.5, 1.27.0-rc.2", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42505" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42505" }, { "url": "https://go.dev/cl/775960" }, { "url": "https://go.dev/issue/79282" }, { "url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42505" }, { "url": "https://pkg.go.dev/vuln/GO-2026-5856" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42505" } ], "published": "2026-07-08T17:17:21+00:00", "updated": "2026-07-13T17:05:36+00:00", "affects": [ { "ref": "pkg:golang/stdlib@v1.25.11", "versions": [ { "version": "v1.25.11", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:golang/stdlib@v1.25.11" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/stdlib@v1.25.11" } ] }, { "id": "CVE-2026-42766", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 476 ], "description": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42766" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42766" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce" }, { "url": "https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4" }, { "url": "https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7" }, { "url": "https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4" }, { "url": "https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8" }, { "url": "https://linux.oracle.com/cve/CVE-2026-42766.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42766" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://ubuntu.com/security/notices/USN-8414-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42766" } ], "published": "2026-06-09T17:17:07+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "CVE-2026-42768", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 6.3, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 514 ], "description": "Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to\nBleichenbacher-style attack when an attacker is able to provide the CMS or\nS/MIME messages and observe the error code and/or decryption output.\n\nImpact summary: The Bleichenbacher-style attack allows an attacker to use the\nvictim's vulnerable application as a way to decrypt or sign messages with the\nvictim's private RSA key.\n\nThe attack is possible in 2 variants.\n\n1. The decryption API (CMS_decrypt(), PKCS7_decrypt()) is used without\nproviding the recipient certificate. In this case OpenSSL iterates over every\nKeyTransRecipientInfo (KTRI) without stopping at the first success.\n\nAn attacker who authors a message with two KTRI entries \u2014 the first one\nwrapping a real CEK under the victim's public key, the second with an\narbitrary probe ciphertext \u2014 obtains opportunity to iterate the 2nd KTRI to\nget a valid PKCS#1 v1.5 padding if the error code of the application is\navailable.\n\nThat is a Bleichenbacher oracle (Bleichenbacher, CRYPTO '98): an\nadaptive-chosen-ciphertext side channel from which the attacker decrypts any\nRSA ciphertext to the victim's key or forges any PKCS#1 v1.5 signature under\nit.\n\n2. When the decryption API (CMS_decrypt(), PKCS7_decrypt()) is provided with\nthe recipient certificate, and the recipient is not found, a random\nkey is substituted.\n\nAn attacker who authors a message and is able to compare both error code and\nthe result of the decryption, can mount a Bleichenbacher oracle.\n\nWe are not aware of any applications that provide a remote attacker\nan opportunity to mount an attack described in these scenarios. We consider\nthe existence of such application very unlikely, and for this reason this\nCVE has been evaluated as Low severity.\n\nTo avoid these attacks, when RSA PKCS#1 v1.5 Key Transport is in use, the\ninvoked EVP_PKEY_decrypt() will use the implicit rejection mechanism described\nin draft-irtf-cfrg-rsa-guidance. In previous OpenSSL releases the implicit\nrejection was explicitly disabled.\n\nThe implicit rejection mechanism always returns a plaintext value,\nthe symmetric key. This result is deterministic for the ciphertext and the\nprivate key. The length of the decryption result can happen to match the\nlength of the key of the symmetric cipher that was used for the content\nencryption. When a certificate is not provided, the last RecipientInfo\nproducing a key that looks valid will be used. It may cause getting garbage\ncontent on decryption. As a proper way to deal with this a recipient\ncertificate has to be provided to identify the particular RecipientInfo for\ndecryption.\n\nThe FIPS modules in 4.0, 3.6, 3.5, and 3.4 are not affected by this issue, as\nCMS and S/MIME processing happens outside the OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42768" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42768" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/a2ca7b2d73e0ffc1eae183fe6e1741dac767cb4f" }, { "url": "https://github.com/openssl/openssl/commit/bbb151a83041705d9d001ed2f9c12f5523e1b54d" }, { "url": "https://github.com/openssl/openssl/commit/dd68364107a58841c0a2546812518b65d3a23abd" }, { "url": "https://github.com/openssl/openssl/commit/f04b377be3d821741c86d1f4bf84dee09f3d5c3e" }, { "url": "https://linux.oracle.com/cve/CVE-2026-42768.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42768" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42768" } ], "published": "2026-06-09T17:17:08+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "CVE-2026-42770", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 325 ], "description": "Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42)\npeer key, the peer key is not properly checked for the subgroup membership.\n\nImpact summary: A malicious peer which presents an X9.42 key carrying the\nvictim's p and g parameters, a forged q = r (a small prime factor of the\ncofactor (p\u22121)/q_local), and a public value Y of order r can recover the\nvictim's private key after a small number of key exchange attempts.\n\nWhen EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the\nsubgroup membership check Y^q \u2261 1 (mod p) is performed using the peer's\nown q parameter, not the local key's q. The peer's domain parameters are\nthen matched against the domain parameters of the private key, but the value\nof q is not compared.\n\nA malicious peer who presents an X9.42 key carrying the victim's p, g,\na forged q = r (a small prime factor of the cofactor), and a public\nvalue Y of order r passes all checks. The shared secret then takes only\nr distinct values, leaking priv mod r. Repeating for each small-prime\nfactor of the cofactor and combining via CRT recovers the full private\nkey (Lim\u2013Lee / small-subgroup-confinement attack).\n\nThe realistic attack surface is narrow: principally CMP deployments with\nlong-lived RA/CA DHX keys and bespoke enterprise or government applications\nusing X9.42 DHX static keys with interactive protocols and therefore this\nissue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, 3.1.2 and 3.0 are affected by this\nissue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42770" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42770" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/3da5a516cd2635a320ff748503db2cef7c4b0f02" }, { "url": "https://github.com/openssl/openssl/commit/3ddbb7ab50bd93dfc59cbe08e269a67605aeebdb" }, { "url": "https://github.com/openssl/openssl/commit/5f452bba2c681423d8fcffd120a19b757ee42e3c" }, { "url": "https://github.com/openssl/openssl/commit/7fbfde7677ed8808828bf00ff01c937ca04bdda2" }, { "url": "https://github.com/openssl/openssl/commit/ca2237ab5615641b662183b077f62c08d75e8070" }, { "url": "https://linux.oracle.com/cve/CVE-2026-42770.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42770" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42770" } ], "published": "2026-06-09T17:17:08+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "CVE-2026-42771", "ratings": [ { "source": { "name": "redhat" }, "score": 6.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 125 ], "description": "Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an\napplication to validate a crafted e-mail address, such as during S/MIME\nmessage validation, an out of bounds read can happen.\n\nImpact summary: This out of bounds read will not directly exfiltrate\nthe data read to the attacker so the most likely result is a crash and\na Denial of Service.\n\nAn internal helper function called from X509_VERIFY_PARAM_[set|add]_email()\nused a wrong length when validating the local part of an email address.\nThis could cause the 64 octet limit on the local part of an email address\nto be not enforced, or cause an out of bound read and potentially a crash.\n\nThe bug is reachable via S-MIME validation with a crafted From: address\nsupplied in an email message that can potentially cause a crash.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-42771" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-42771" }, { "url": "https://github.com/openssl/openssl/commit/6cd187689f8180c1f8a3acde21f88190c4a20de7" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42771" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-42771" } ], "published": "2026-06-09T17:17:08+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-4360", "ratings": [ { "source": { "name": "nvd" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], "cwes": [ 281 ], "description": "In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-4360" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-4360" }, { "url": "https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0" }, { "url": "https://github.com/python/cpython/commit/7b57e8d51446297b8c7c482d224bc5f1938e4301" }, { "url": "https://github.com/python/cpython/commit/7ccdbaba2c54250a70d7f25632152df7655a5e0a" }, { "url": "https://github.com/python/cpython/commit/cf23b9153181062150d061468b6d24af33fe214f" }, { "url": "https://github.com/python/cpython/commit/d2b2f5eacab4dd48446b63340613b05dcbbf0b44" }, { "url": "https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e" }, { "url": "https://github.com/python/cpython/issues/151987" }, { "url": "https://github.com/python/cpython/pull/151988" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4360" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-4360" } ], "published": "2026-06-30T15:16:57+00:00", "updated": "2026-07-23T19:16:54+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-43894", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.2, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 190 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX-1 (2147483646) digits, the D2U() macro overflows during signed-int arithmetic. The wrapped negative value bypasses the heap-allocation size check, causes the function to use a 30-byte stack buffer, and then writes \u2248715 million 16-bit units (\u22481.4 GiB) at an offset 1.43 GiB below the stack frame. The written content is fully attacker-controlled (the parsed decimal digits, packed 3-per-unit).", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-43894" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-43894" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-5v7p-2r57-2g4g" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43894" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-43894" } ], "published": "2026-05-11T18:16:37+00:00", "updated": "2026-06-17T10:50:02+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-43895", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 20, 158 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string operations during module and data-file lookup. This creates a mismatch between the logical import string that policy or audit code may validate and the on-disk path that jq actually opens.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-43895" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-43895" }, { "url": "https://github.com/jqlang/jq/commit/9d223f153c3632a207fa071caaa6292da33ae361" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-7q7g-mrq3-phxr" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43895" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-43895" } ], "published": "2026-05-11T18:16:37+00:00", "updated": "2026-06-17T10:50:02+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-43896", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_object_merge_recursive() allows a crafted jq program to crash the process with a segfault. The function is reachable through the * operator when both operands are objects.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-43896" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-43896" }, { "url": "https://github.com/jqlang/jq/commit/532ccea6080ed6758f39fe9f6208a44b665023d2" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-mg96-6h3q-g846" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43896" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-43896" } ], "published": "2026-05-11T18:16:37+00:00", "updated": "2026-06-17T10:50:02+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-4437", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-4437" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19061" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-4437" }, { "url": "https://bugzilla.redhat.com/2449777" }, { "url": "https://bugzilla.redhat.com/2449783" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449777" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449783" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453117" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4046" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4437" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4438" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-19061.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:20597" }, { "url": "https://linux.oracle.com/cve/CVE-2026-4437.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-500006.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4437" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34014" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-4437" }, { "url": "https://www.openwall.com/lists/oss-security/2026/03/23/2" } ], "published": "2026-03-20T20:16:49+00:00", "updated": "2026-07-14T13:18:57+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-4438", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 20, 88 ], "description": "Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-4438" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19061" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-4438" }, { "url": "https://bugzilla.redhat.com/2449777" }, { "url": "https://bugzilla.redhat.com/2449783" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449777" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449783" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453117" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4046" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4437" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4438" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-19061.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:20597" }, { "url": "https://linux.oracle.com/cve/CVE-2026-4438.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-500006.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4438" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34015" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-4438" }, { "url": "https://www.openwall.com/lists/oss-security/2026/03/23/2" } ], "published": "2026-03-20T20:16:49+00:00", "updated": "2026-07-14T13:18:58+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-44777", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 674 ], "description": "jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two\notherwise valid modules include each other.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-44777" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-44777" }, { "url": "https://github.com/jqlang/jq/commit/f58787c41835d9b17795730cb04925fdba25c71c" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-rmpv-jgvr-wpr9" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44777" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-44777" } ], "published": "2026-05-11T18:16:38+00:00", "updated": "2026-06-17T10:51:19+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-46600", "source": { "name": "govulndb", "url": "https://pkg.go.dev/vuln/" }, "ratings": [], "cwes": [ 125 ], "description": "Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.", "recommendation": "Upgrade golang.org/x/net to version 0.56.0", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-46600" }, { "url": "https://go.dev/cl/786345" }, { "url": "https://go.dev/issue/79795" }, { "url": "https://pkg.go.dev/vuln/GO-2026-5942" } ], "published": "2026-07-21T20:17:01+00:00", "updated": "2026-07-23T18:27:48+00:00", "affects": [ { "ref": "pkg:golang/golang.org/x/net@v0.55.0", "versions": [ { "version": "v0.55.0", "status": "affected" } ] }, { "ref": "pkg:golang/golang.org/x/net@v0.55.0", "versions": [ { "version": "v0.55.0", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#d29b227f-07ca-406f-bafc-5c3b4c4d1f01" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/golang.org/x/net@v0.55.0" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-47770", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "cwes": [ 674 ], "description": "jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in denial of service via stack exhaustion (uncontrolled recursion). The crash occurs in jq's recursive structural comparison code, with the recursion repeating through jvp_array_equal() and jv_equal() in src/jv.c when comparing deeply nested arrays; a nearby sort comparator path through jv_cmp() in src/jv_aux.c overflows the stack at a larger nesting depth from the same missing recursion guard. Anyone running jq comparisons on attacker-controlled deeply nested JSON values, or embedding jq in a context where untrusted data can reach the == comparison path, is affected. This vulnerability is fixed in 1.8.2.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-47770" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-47770" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-3pgx-frr7-3jxp" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47770" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-47770" } ], "published": "2026-06-25T18:16:38+00:00", "updated": "2026-06-26T19:16:41+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-49839", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.6, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" } ], "cwes": [ 787 ], "description": "jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds. When jv_load_file(raw=1) reads an attacker-controlled file, it repeatedly appends file chunks to the same jv string accumulator. Once jv_string_append_buf() returns jv_invalid_with_msg(\"String too long\"), the raw-file loop does not stop. If the file contains at least one more byte, the next loop iteration appends a new chunk to an object that is already invalid. With assertions enabled this aborts in jvp_string_ptr(). With assertions disabled, the invalid object is interpreted as a string object and ASan reports heap-buffer-overflow. This vulnerability is fixed in 1.8.2.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-49839" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-49839" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-cfh2-vwfq-qfmm" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49839" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-49839" } ], "published": "2026-06-25T18:16:38+00:00", "updated": "2026-06-26T18:53:19+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-50219", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "nvd" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "redhat" }, "score": 4.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "cwes": [ 416 ], "description": "libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-50219" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-50219" }, { "url": "https://github.com/libexpat/libexpat/pull/1246" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50219" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-50219" } ], "published": "2026-06-04T06:16:25+00:00", "updated": "2026-07-22T20:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-53655", "ratings": [ { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "redhat" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N" } ], "cwes": [ 436 ], "description": "node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata headers such as a GNU long-name (L) or long-link (K) entry. Per POSIX pax, a PAX extended header (x) describes the next file entry, not the intermediary extension headers that may sit between the x header and the file it annotates. Because node-tar lets the PAX size override the byte length of an intervening L/K/x header, an attacker can desynchronize node-tar's stream cursor relative to every other mainstream tar implementation (GNU tar, libarchive/bsdtar, Python tarfile, and the now-fixed tar-rs / astral-tokio-tar). The result is a tar parser interpretation differential (CWE-436): a single crafted archive yields a different set of members under node-tar than under the reference tar tools. An attacker can use this to hide a member from one parser while it is visible to another, which defeats security tooling whose scanner and extractor disagree on archive contents (e.g. a malware/secret scanner that lists entries with one library while a downstream step extracts with another) This vulnerability is fixed in 7.5.16.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-53655" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-53655" }, { "url": "https://github.com/isaacs/node-tar" }, { "url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53655" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-53655" } ], "published": "2026-06-22T16:16:38+00:00", "updated": "2026-06-26T20:03:47+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-5419", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 3.7, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 208 ], "description": "A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5419" }, { "url": "https://access.redhat.com/errata/RHSA-2026:13274" }, { "url": "https://access.redhat.com/errata/RHSA-2026:20612" }, { "url": "https://access.redhat.com/errata/RHSA-2026:20613" }, { "url": "https://access.redhat.com/errata/RHSA-2026:26319" }, { "url": "https://access.redhat.com/errata/RHSA-2026:26409" }, { "url": "https://access.redhat.com/errata/RHSA-2026:29197" }, { "url": "https://access.redhat.com/errata/RHSA-2026:30004" }, { "url": "https://access.redhat.com/errata/RHSA-2026:32962" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5419" }, { "url": "https://bugzilla.redhat.com/2445763" }, { "url": "https://bugzilla.redhat.com/2450624" }, { "url": "https://bugzilla.redhat.com/2450625" }, { "url": "https://bugzilla.redhat.com/2467279" }, { "url": "https://bugzilla.redhat.com/2467289" }, { "url": "https://bugzilla.redhat.com/2467437" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445762" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445763" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450624" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450625" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467441" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467448" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467450" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467451" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467678" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467686" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33845" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33846" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3832" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3833" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42009" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42010" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42011" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42012" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42013" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42014" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42015" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5260" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5419" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-20613.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:20612" }, { "url": "https://linux.oracle.com/cve/CVE-2026-5419.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50346.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5419" }, { "url": "https://ubuntu.com/security/notices/USN-8284-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5419" }, { "url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13" } ], "published": "2026-06-01T21:16:47+00:00", "updated": "2026-07-22T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.16-8.el8_10.6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-5435", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 787 ], "description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.", "recommendation": "Upgrade glibc to version 2.28-251.el8_10.40; Upgrade glibc-all-langpacks to version 2.28-251.el8_10.40; Upgrade glibc-common to version 2.28-251.el8_10.40", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5435" }, { "url": "https://access.redhat.com/errata/RHSA-2026:42733" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5435" }, { "url": "https://bugzilla.redhat.com/2459854" }, { "url": "https://bugzilla.redhat.com/2463465" }, { "url": "https://bugzilla.redhat.com/2463539" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-42733.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:42952" }, { "url": "https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/" }, { "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u" }, { "url": "https://linux.oracle.com/cve/CVE-2026-5435.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-42952.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033" }, { "url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435" } ], "published": "2026-04-28T13:19:22+00:00", "updated": "2026-07-14T13:19:01+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-54369", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 7.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" } ], "cwes": [ 59 ], "description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.", "recommendation": "Upgrade libacl to version 2.4.0-1.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-54369" }, { "url": "https://access.redhat.com/errata/RHSA-2026:34351" }, { "url": "https://access.redhat.com/errata/RHSA-2026:42736" }, { "url": "https://access.redhat.com/errata/RHSA-2026:42739" }, { "url": "https://access.redhat.com/errata/RHSA-2026:43420" }, { "url": "https://access.redhat.com/errata/RHSA-2026:44481" }, { "url": "https://access.redhat.com/errata/RHSA-2026:46836" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-54369" }, { "url": "https://bugzilla.redhat.com/2490277" }, { "url": "https://bugzilla.redhat.com/2490279" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-43420.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:42736" }, { "url": "https://linux.oracle.com/cve/CVE-2026-54369.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-43420.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369" }, { "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions" } ], "published": "2026-06-29T14:16:57+00:00", "updated": "2026-07-28T13:18:56+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.53-3.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-54370", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" } ], "cwes": [ 367 ], "description": "acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-following operations such as stat(), chown(), chmod(), acl_get_file(), and acl_set_file(). Attackers who control a pathname component can redirect file access control list operations to arbitrary files when getfacl, setfacl, or chacl is invoked by a privileged process over an attacker-controlled path, resulting in local privilege escalation.", "recommendation": "Upgrade libacl to version 2.4.0-1.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-54370" }, { "url": "https://access.redhat.com/errata/RHSA-2026:43420" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-54370" }, { "url": "https://bugzilla.redhat.com/2490277" }, { "url": "https://bugzilla.redhat.com/2490279" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-43420.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:42736" }, { "url": "https://linux.oracle.com/cve/CVE-2026-54370.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-43420.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-54370" }, { "url": "https://www.vulncheck.com/advisories/acl-toctou-symlink-traversal-via-getfacl-setfacl-chacl" } ], "published": "2026-06-29T14:16:57+00:00", "updated": "2026-06-29T19:22:57+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.53-3.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libacl@2.2.53-3.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-54371", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "cwes": [ 59 ], "description": "attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-54371" }, { "url": "https://access.redhat.com/errata/RHSA-2026:34889" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-54371" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f" }, { "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-54371" }, { "url": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr" } ], "published": "2026-06-29T14:16:57+00:00", "updated": "2026-07-15T01:16:35+00:00", "affects": [ { "ref": "pkg:rpm/redhat/libattr@2.4.48-3.el8?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.4.48-3.el8", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/libattr@2.4.48-3.el8?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/libattr@2.4.48-3.el8?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-5450", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "critical" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 122, 787 ], "description": "Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.", "recommendation": "Upgrade glibc to version 2.28-251.el8_10.38; Upgrade glibc-all-langpacks to version 2.28-251.el8_10.38; Upgrade glibc-common to version 2.28-251.el8_10.38", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5450" }, { "url": "https://access.redhat.com/errata/RHSA-2026:33126" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5450" }, { "url": "https://bugzilla.redhat.com/2459853" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5450" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-33126.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:33226" }, { "url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u" }, { "url": "https://linux.oracle.com/cve/CVE-2026-5450.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50370.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450" }, { "url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0009" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5450" } ], "published": "2026-04-20T21:16:36+00:00", "updated": "2026-07-14T13:19:01+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-54679", "ratings": [ { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "cwes": [ 190 ], "description": "jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-54679" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-54679" }, { "url": "https://github.com/jqlang/jq/security/advisories/GHSA-29gj-222p-j7vx" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54679" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-54679" } ], "published": "2026-06-25T18:16:40+00:00", "updated": "2026-06-26T18:53:32+00:00", "affects": [ { "ref": "pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.6-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/jq@1.6-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56131", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 4.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], "cwes": [ 416 ], "description": "libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56131" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56131" }, { "url": "https://github.com/libexpat/libexpat/pull/1267" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56131" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56131" } ], "published": "2026-06-19T06:17:10+00:00", "updated": "2026-06-23T20:15:48+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56132", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "source": { "name": "redhat" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "cwes": [ 821 ], "description": "In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56132" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56132" }, { "url": "https://github.com/libexpat/libexpat/pull/1272" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56132" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56132" } ], "published": "2026-06-19T06:17:10+00:00", "updated": "2026-06-23T20:15:26+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-56391", "ratings": [ { "source": { "name": "redhat" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" } ], "cwes": [ 125 ], "description": "GNU coreutils uniq is vulnerable to an out\u2011of\u2011bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56391" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56391" }, { "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391" }, { "url": "https://git.savannah.gnu.org/cgit/coreutils.git/" }, { "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56391" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56391" } ], "published": "2026-07-24T09:16:25+00:00", "updated": "2026-07-30T16:28:33+00:00", "affects": [ { "ref": "pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56392", "ratings": [ { "source": { "name": "redhat" }, "score": 4.4, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], "cwes": [ 122 ], "description": "GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out\u2011of\u2011bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d", "recommendation": "Upgrade coreutils to version 8.30-20.el8_10; Upgrade coreutils-common to version 8.30-20.el8_10", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56392" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56392" }, { "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391" }, { "url": "https://git.savannah.gnu.org/cgit/coreutils.git/" }, { "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56392" } ], "published": "2026-07-24T09:16:25+00:00", "updated": "2026-07-30T16:28:33+00:00", "affects": [ { "ref": "pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "8.30-17.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils-common@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/coreutils@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/coreutils-single@8.30-17.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56403", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "source": { "name": "redhat" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "cwes": [ 190 ], "description": "libexpat before 2.8.2 has an integer overflow in storeAtts.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56403" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56403" }, { "url": "https://github.com/libexpat/libexpat/pull/1232" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56403" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56403" } ], "published": "2026-06-21T16:16:26+00:00", "updated": "2026-06-23T20:15:16+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-56404", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "source": { "name": "redhat" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "cwes": [ 190 ], "description": "libexpat before 2.8.2 has an integer overflow in addBinding.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56404" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56404" }, { "url": "https://github.com/libexpat/libexpat/pull/1249" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56404" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56404" } ], "published": "2026-06-21T16:16:27+00:00", "updated": "2026-06-23T20:15:05+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56405", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" }, { "source": { "name": "redhat" }, "score": 4.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "cwes": [ 190 ], "description": "libexpat before 2.8.2 has an integer overflow in getAttributeId.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56405" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56405" }, { "url": "https://github.com/libexpat/libexpat/pull/1251" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56405" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56405" } ], "published": "2026-06-21T16:16:27+00:00", "updated": "2026-06-23T20:14:51+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-56406", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "cwes": [ 190 ], "description": "libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56406" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56406" }, { "url": "https://github.com/libexpat/libexpat/pull/1255" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56406" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56406" } ], "published": "2026-06-21T16:16:27+00:00", "updated": "2026-06-23T16:29:06+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-56407", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], "cwes": [ 190 ], "description": "libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56407" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56407" }, { "url": "https://github.com/libexpat/libexpat/pull/1262" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56407" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56407" } ], "published": "2026-06-21T16:16:27+00:00", "updated": "2026-06-23T16:28:29+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-56412", "ratings": [ { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "source": { "name": "redhat" }, "score": 4.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "cwes": [ 416 ], "description": "libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56412" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-56412" }, { "url": "https://github.com/libexpat/libexpat/pull/1278" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56412" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-56412" } ], "published": "2026-06-21T17:16:44+00:00", "updated": "2026-06-23T15:31:30+00:00", "affects": [ { "ref": "pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.5.0-2.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/expat@2.5.0-2.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-56852", "source": { "name": "govulndb", "url": "https://pkg.go.dev/vuln/" }, "ratings": [ { "source": { "name": "azure" }, "severity": "high" } ], "cwes": [ 835 ], "description": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.", "recommendation": "Upgrade golang.org/x/text to version 0.39.0", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-56852" }, { "url": "https://go.dev/cl/794100" }, { "url": "https://go.dev/issue/80142" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852" }, { "url": "https://pkg.go.dev/vuln/GO-2026-5970" } ], "published": "2026-07-21T20:17:02+00:00", "updated": "2026-07-23T18:27:48+00:00", "affects": [ { "ref": "pkg:golang/golang.org/x/text@v0.38.0", "versions": [ { "version": "v0.38.0", "status": "affected" } ] }, { "ref": "pkg:golang/golang.org/x/text@v0.38.0", "versions": [ { "version": "v0.38.0", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#d7fac548-68e9-4fd9-b6e5-38985f94bd22" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/golang.org/x/text@v0.38.0" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-5704", "ratings": [ { "source": { "name": "nvd" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 434 ], "description": "A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5704" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/11/10" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/11/11" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/12/2" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5704" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455360" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5704" }, { "url": "https://ubuntu.com/security/notices/USN-8477-1" }, { "url": "https://ubuntu.com/security/notices/USN-8477-2" }, { "url": "https://ubuntu.com/security/notices/USN-8477-3" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5704" } ], "published": "2026-04-06T16:16:42+00:00", "updated": "2026-06-17T10:59:31+00:00", "affects": [ { "ref": "pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2", "versions": [ { "version": "2:1.30-11.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/tar@1.30-11.el8_10?arch=x86_64&distro=redhat-8.10&epoch=2" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-57062", "ratings": [ { "source": { "name": "amazon" }, "severity": "low" }, { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "julia" }, "score": 2.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "photon" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 2.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "cwes": [ 1284 ], "description": "CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-57062" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-57062" }, { "url": "https://blog.calif.io/p/how-to-format-a-ciphertext" }, { "url": "https://github.com/advisories/GHSA-m6x2-4hhh-669j" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57062" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-57062" }, { "url": "https://www.gnupg.org/download" }, { "url": "https://www.gnupg.org/download/" } ], "published": "2026-06-23T18:18:10+00:00", "updated": "2026-06-25T20:16:05+00:00", "affects": [ { "ref": "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.2.20-4.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-5713", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 6, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 121, 125 ], "description": "The \"profiling.sampling\" module (Python 3.15+) and \"asyncio introspection capabilities\" (3.14+, \"python -m asyncio ps\" and \"python -m asyncio pstree\") features could be used to read and write addresses in a privileged process if that process connected to a malicious or \"infected\" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be exploited, even after the connecting process crashes with high likelihood due to ASLR.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5713" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/15/6" }, { "url": "https://access.redhat.com/errata/RHSA-2026:19019" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5713" }, { "url": "https://bugzilla.redhat.com/2431367" }, { "url": "https://bugzilla.redhat.com/2444691" }, { "url": "https://bugzilla.redhat.com/2448168" }, { "url": "https://bugzilla.redhat.com/2448181" }, { "url": "https://bugzilla.redhat.com/2449649" }, { "url": "https://bugzilla.redhat.com/2457409" }, { "url": "https://bugzilla.redhat.com/2457932" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/2458239" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431367" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444691" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448168" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448181" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457409" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458239" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0865" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1502" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3644" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4224" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4519" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5713" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6100" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-19019.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:19176" }, { "url": "https://github.com/python/cpython/commit/289fd2c97a7e5aecb8b69f94f5e838ccfeee7e67" }, { "url": "https://github.com/python/cpython/commit/316f6265b7f9ca4ffed5346b747475ef1943f35d" }, { "url": "https://github.com/python/cpython/issues/148178" }, { "url": "https://github.com/python/cpython/pull/148187" }, { "url": "https://linux.oracle.com/cve/CVE-2026-5713.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-19176.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5713" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5713" } ], "published": "2026-04-14T16:16:48+00:00", "updated": "2026-07-31T14:16:50+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-58469", "ratings": [ { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 125 ], "description": "GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-58469" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-58469" }, { "url": "https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58469" }, { "url": "https://ubuntu.com/security/notices/USN-8543-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-58469" }, { "url": "https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-underread-via-metalink-url-parsing" } ], "published": "2026-07-07T21:17:28+00:00", "updated": "2026-07-09T15:59:43+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-58470", "ratings": [ { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 190 ], "description": "GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-58470" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-58470" }, { "url": "https://gitlab.com/gnuwget/wget/-/commit/43d3ba9336bc94937e6fae2365c6ffd30c34ffcf" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58470" }, { "url": "https://ubuntu.com/security/notices/USN-8543-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-58470" }, { "url": "https://www.vulncheck.com/advisories/gnu-wget-integer-overflow-via-content-range-header-parsing" } ], "published": "2026-07-07T21:17:28+00:00", "updated": "2026-07-09T16:01:18+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-58471", "ratings": [ { "source": { "name": "nvd" }, "score": 7.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 122 ], "description": "GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-58471" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-58471" }, { "url": "https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58471" }, { "url": "https://ubuntu.com/security/notices/USN-8543-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-58471" }, { "url": "https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c" } ], "published": "2026-07-07T21:17:28+00:00", "updated": "2026-07-09T16:02:07+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-58472", "ratings": [ { "source": { "name": "nvd" }, "score": 7.1, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 190 ], "description": "GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-58472" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-58472" }, { "url": "https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58472" }, { "url": "https://ubuntu.com/security/notices/USN-8543-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-58472" }, { "url": "https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding" } ], "published": "2026-07-07T21:17:28+00:00", "updated": "2026-07-09T15:58:45+00:00", "affects": [ { "ref": "pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "1.19.5-12.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/wget@1.19.5-12.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-5928", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 127 ], "description": "Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.", "recommendation": "Upgrade glibc to version 2.28-251.el8_10.40; Upgrade glibc-all-langpacks to version 2.28-251.el8_10.40; Upgrade glibc-common to version 2.28-251.el8_10.40", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5928" }, { "url": "https://access.redhat.com/errata/RHSA-2026:42733" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5928" }, { "url": "https://bugzilla.redhat.com/2459854" }, { "url": "https://bugzilla.redhat.com/2463465" }, { "url": "https://bugzilla.redhat.com/2463539" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-42733.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:42952" }, { "url": "https://linux.oracle.com/cve/CVE-2026-5928.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-42952.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998" }, { "url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0010" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928" } ], "published": "2026-04-20T21:16:36+00:00", "updated": "2026-07-14T13:19:01+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-5958", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 6.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 367 ], "description": "When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: \n1. resolves symlink to its target and stores\u00a0the resolved path for determining when output is written,\n2. opens the original symlink path\u00a0(not the resolved one) to read the file. \nBetween these two calls there is a race window. If an attacker atomically replaces the symlink with a different target during that window, sed will: read content from the new (attacker-chosen) symlink target and write the processed result to the path recorded in step 1.\u00a0This can lead to arbitrary file overwrite with attacker-controlled content in the context of the sed process.\n\n\nThis issue was fixed in version 4.10.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-5958" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/13/1" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-5958" }, { "url": "https://cert.pl/en/posts/2026/04/CVE-2026-5958" }, { "url": "https://github.com/advisories/GHSA-9r7w-j29g-xqx8" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5958" }, { "url": "https://ubuntu.com/security/notices/USN-8229-1" }, { "url": "https://ubuntu.com/security/notices/USN-8229-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5958" }, { "url": "https://www.gnu.org/software/sed" }, { "url": "https://www.gnu.org/software/sed/" } ], "published": "2026-04-20T12:16:08+00:00", "updated": "2026-06-17T10:59:56+00:00", "affects": [ { "ref": "pkg:rpm/redhat/sed@4.5-5.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "4.5-5.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/sed@4.5-5.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-6019", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 6.1, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "source": { "name": "oracle-oval" }, "severity": "high" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 150, 116 ], "description": "http.cookies.Morsel.js_output() returns an inline inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-6019" }, { "url": "https://access.redhat.com/errata/RHSA-2026:28581" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6019" }, { "url": "https://bugzilla.redhat.com/2458049" }, { "url": "https://bugzilla.redhat.com/2460869" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460869" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6019" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-28581.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:28247" }, { "url": "https://github.com/python/cpython/commit/3c59b8b53fc75c7f9578d16fb8201ceb43e8f76c" }, { "url": "https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104" }, { "url": "https://github.com/python/cpython/commit/f795e042043dfe26c42e1971d4502c1cdc4c65b8" }, { "url": "https://github.com/python/cpython/issues/90309" }, { "url": "https://github.com/python/cpython/pull/148848" }, { "url": "https://linux.oracle.com/cve/CVE-2026-6019.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-28581.html" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6019" }, { "url": "https://ubuntu.com/security/notices/USN-8509-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6019" } ], "published": "2026-04-22T20:16:42+00:00", "updated": "2026-07-27T17:34:54+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-6238", "ratings": [ { "source": { "name": "alma" }, "severity": "medium" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 6.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "medium" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 126 ], "description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.\n\nThese functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.", "recommendation": "Upgrade glibc to version 2.28-251.el8_10.40; Upgrade glibc-all-langpacks to version 2.28-251.el8_10.40; Upgrade glibc-common to version 2.28-251.el8_10.40", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-6238" }, { "url": "https://access.redhat.com/errata/RHSA-2026:42733" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6238" }, { "url": "https://bugzilla.redhat.com/2459854" }, { "url": "https://bugzilla.redhat.com/2463465" }, { "url": "https://bugzilla.redhat.com/2463539" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238" }, { "url": "https://errata.almalinux.org/8/ALSA-2026-42733.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:42952" }, { "url": "https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/" }, { "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u" }, { "url": "https://linux.oracle.com/cve/CVE-2026-6238.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-42952.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238" }, { "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069" }, { "url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0012" }, { "url": "https://ubuntu.com/security/notices/USN-8611-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238" } ], "published": "2026-04-28T19:37:47+00:00", "updated": "2026-07-14T13:19:09+00:00", "affects": [ { "ref": "pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.28-251.el8_10.37", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-all-langpacks@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-common@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.37?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-6390", "ratings": [ { "source": { "name": "redhat" }, "score": 6.8, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 134 ], "description": "A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to achieve stack information disclosure, cause a denial of service (crash), or potentially perform arbitrary memory writes.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-6390" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6390" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458767" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6390" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6390" } ], "published": "2026-07-23T05:16:38+00:00", "updated": "2026-07-23T15:33:09+00:00", "affects": [ { "ref": "pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.9.8-3.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-6842", "ratings": [ { "source": { "name": "azure" }, "severity": "low" }, { "source": { "name": "redhat" }, "score": 2.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 732 ], "description": "A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-6842" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6842" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455314" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460018" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6842" }, { "url": "https://ubuntu.com/security/notices/USN-8386-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6842" } ], "published": "2026-04-22T08:16:13+00:00", "updated": "2026-06-17T11:01:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.9.8-3.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-6843", "ratings": [ { "source": { "name": "azure" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "medium" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "source": { "name": "ubuntu" }, "severity": "medium" } ], "cwes": [ 134 ], "description": "A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-6843" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6843" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455127" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460017" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6843" }, { "url": "https://ubuntu.com/security/notices/USN-8386-1" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-6843" } ], "published": "2026-04-22T09:16:26+00:00", "updated": "2026-06-17T11:01:25+00:00", "affects": [ { "ref": "pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "2.9.8-3.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/nano@2.9.8-3.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } }, { "id": "CVE-2026-7210", "ratings": [ { "source": { "name": "amazon" }, "severity": "medium" }, { "source": { "name": "nvd" }, "score": 7.5, "severity": "high", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.3, "severity": "medium", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "cwes": [ 331 ], "description": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-7210" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/11/13" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/11/8" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-7210" }, { "url": "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4" }, { "url": "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566" }, { "url": "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a" }, { "url": "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f" }, { "url": "https://github.com/python/cpython/issues/149018" }, { "url": "https://github.com/python/cpython/pull/149023" }, { "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7210" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-7210" } ], "published": "2026-05-11T18:16:42+00:00", "updated": "2026-07-27T17:35:08+00:00", "affects": [ { "ref": "pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10", "versions": [ { "version": "3.6.8-76.el8_10", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/platform-python@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/python3-libs@3.6.8-76.el8_10?arch=x86_64&distro=redhat-8.10" } ], "analysis": { "state": "not_affected", "justification": "code_not_reachable", "response": [ "update" ], "detail": "This issue is not exploitable in Confluent for Kubernetes. This issue will be addressed in an upcoming quarterly patch release if an updated package is available from the vendor. The affected component is an operating-system base-image package that the product's application code does not use, so the vulnerable code path is not reachable." } }, { "id": "CVE-2026-7383", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.5, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 787 ], "description": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-7383" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-7383" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6" }, { "url": "https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74" }, { "url": "https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974" }, { "url": "https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083" }, { "url": "https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255" }, { "url": "https://linux.oracle.com/cve/CVE-2026-7383.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7383" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://ubuntu.com/security/notices/USN-8414-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-7383" } ], "published": "2026-06-09T17:17:50+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "CVE-2026-9076", "ratings": [ { "source": { "name": "alma" }, "severity": "high" }, { "source": { "name": "amazon" }, "severity": "high" }, { "source": { "name": "azure" }, "severity": "high" }, { "source": { "name": "oracle-oval" }, "severity": "medium" }, { "source": { "name": "photon" }, "severity": "high" }, { "source": { "name": "redhat" }, "score": 5.9, "severity": "low", "method": "CVSSv31", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "source": { "name": "rocky" }, "severity": "high" }, { "source": { "name": "ubuntu" }, "severity": "low" } ], "cwes": [ 125 ], "description": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.", "advisories": [ { "url": "https://avd.aquasec.com/nvd/cve-2026-9076" }, { "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-9076" }, { "url": "https://bugzilla.redhat.com/2481879" }, { "url": "https://bugzilla.redhat.com/2481880" }, { "url": "https://bugzilla.redhat.com/2481881" }, { "url": "https://bugzilla.redhat.com/2481882" }, { "url": "https://bugzilla.redhat.com/2481884" }, { "url": "https://bugzilla.redhat.com/2481885" }, { "url": "https://bugzilla.redhat.com/2481887" }, { "url": "https://bugzilla.redhat.com/2481890" }, { "url": "https://bugzilla.redhat.com/2481891" }, { "url": "https://bugzilla.redhat.com/2481892" }, { "url": "https://bugzilla.redhat.com/2481893" }, { "url": "https://bugzilla.redhat.com/2481894" }, { "url": "https://bugzilla.redhat.com/2481896" }, { "url": "https://bugzilla.redhat.com/2481897" }, { "url": "https://bugzilla.redhat.com/2481898" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076" }, { "url": "https://errata.almalinux.org/10/ALSA-2026-25237.html" }, { "url": "https://errata.rockylinux.org/RLSA-2026:25239" }, { "url": "https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb" }, { "url": "https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0" }, { "url": "https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98" }, { "url": "https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26" }, { "url": "https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6" }, { "url": "https://linux.oracle.com/cve/CVE-2026-9076.html" }, { "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9076" }, { "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "url": "https://ubuntu.com/security/notices/USN-8414-2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-9076" } ], "published": "2026-06-09T17:17:50+00:00", "updated": "2026-07-23T08:10:00+00:00", "affects": [ { "ref": "pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1", "versions": [ { "version": "1:1.1.1k-16.el8_6", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:rpm/redhat/openssl-libs@1.1.1k-16.el8_6?arch=x86_64&distro=redhat-8.10&epoch=1" } ] }, { "id": "GHSA-hrxh-6v49-42gf", "source": { "name": "ghsa", "url": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago" }, "ratings": [], "description": "Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine (internal/xds/rbac) and the HTTP/2 transport server implementation (internal/transport). These vulnerabilities could result in:\n\n- Authorization Bypass (Fail-Open) when translating xDS RBAC policies containing `Metadata` or `RequestedServerName` fields.\n- Denial of Service (High CPU Consumption) due to an HTTP/2 Rapid Reset mitigation bypass during client-initiated stream resets.\n- Denial of Service (Server Panic) when parsing crafted xDS RBAC policies containing `NOT` rules around unsupported fields.\n\n\n### Impact\n_What kind of vulnerability is it? Who is impacted?_\n\n#### xDS RBAC Authorization Bypass via `Metadata` & `RequestedServerName` matchers\n\n- Affected Component: xDS RBAC \n- Impact: When building policy matchers for gRPC RBAC from xDS configurations, unsupported `permission` and `principal` rules (specifically `Metadata` and `RequestedServerName`) were silently ignored and treated as no-ops.\n - If an authorization policy relied purely on these matchers for access control, treating those rules as no-ops effectively removed the restrictions.\n- If these unsupported rules were nested inside logical `NOT` rules (`Permission_NotRule` / `Principal_NotId`) or multi-condition `OR/AND` rules, silently dropping them changed the boolean logic flow of the authorization engine.\n\nAs a result, policy evaluation decisions could fail open, allowing unauthorized clients to access protected gRPC services or resources.\n\n#### HTTP/2 Rapid Reset Mitigation Bypass / Denial of Service via Stream Aborts\n\n- Affected Component: HTTP/2 transport\n- Impact: Earlier mitigations in grpc-go for HTTP/2 Rapid Reset only applied threshold checks to items that directly resulted in control frames being written back to the wire, such as `SETTINGS` ACKs or server-initiated `RST_STREAM`s.\n\nWhen a client initiated a rapid flood of stream creation (`HEADERS`) immediately followed by stream termination `RST_STREAM`, items queued up in the control buffer without counting against the transport response frame threshold. An attacker can repeatedly trigger this flood sequence to bypass reader blocking, resulting in high CPU usage, and Denial of Service (DoS).\n\n#### Denial of Service (Panic) in xDS RBAC Engine via Unsupported Fields inside NOT Rules\n\n- Affected Component: xDS RBAC \n- Impact: The xDS RBAC policy translators recursively generate matchers for nested rules. When a `NOT` rule wrapped an unsupported or unhandled field (such as `SourcedMetadata`), the recursive step returned an empty matcher. This could result in a runtime panic when the RBAC engine attempts to authorize an incoming request.\n\nAn attacker or misconfigured/malicious xDS management server delivering an LDS/RDS update containing a `NOT` rule around an unhandled field causes the gRPC server process to crash immediately (CWE-248 / Denial of Service).\n\n### Patches\n_Has the problem been patched? What versions should users upgrade to?_\n\nAll three issues have been fixed in `master` and will be released in 1.82.1 shortly.\n\n### Workarounds\n_Is there a way for users to fix or remediate the vulnerability without upgrading?_\n\nIf upgrading grpc-go immediately is not possible, apply the following workarounds based on your deployment architecture:\n\n* For xDS RBAC Vulnerabilities & Panics: Ensure that upstream xDS management servers do not push RBAC policies containing `Metadata`, `RequestedServerName`, or `NOT` rules wrapping unsupported fields (such as `SourcedMetadata`) to grpc-go servers.\n* For HTTP/2 Rapid Reset DOS: Configure upstream reverse proxies or load balancers (such as Envoy) with strict HTTP/2 `max_concurrent_streams` limits and active rate limiting on `RST_STREAM` frequency per connection.\n\n### Severity\n\n | Vulnerability | Qualitative Severity | Approximate CVSS v3.1 Score | Primary Impact |\n | :--- | :--- | :--- | :--- |\n | **xDS RBAC Authorization Bypass** | **High** | `8.2` | Unauthorized Access / Fail-Open |\n | **HTTP/2 Rapid Reset DOS Bypass** | **High** | `7.5` | High CPU Consumption / Denial of Service |\n | **xDS RBAC Engine Server Panic** | **Medium** | `5.9` | Process Crash / Denial of Service |", "recommendation": "Upgrade google.golang.org/grpc to version 1.82.1", "advisories": [ { "url": "https://github.com/advisories/GHSA-hrxh-6v49-42gf" }, { "url": "https://github.com/grpc/grpc-go" }, { "url": "https://github.com/grpc/grpc-go/commit/4ea465d4ab98013f72a142fe0fc89c19770b2935" }, { "url": "https://github.com/grpc/grpc-go/pull/9236" }, { "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.1" }, { "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-hrxh-6v49-42gf" } ], "published": "2026-07-21T22:03:55+00:00", "updated": "2026-07-21T22:03:56+00:00", "affects": [ { "ref": "pkg:golang/google.golang.org/grpc@v1.80.0", "versions": [ { "version": "v1.80.0", "status": "affected" } ] }, { "ref": "pkg:golang/google.golang.org/grpc@v1.81.1", "versions": [ { "version": "v1.81.1", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:golang/google.golang.org/grpc@v1.80.0" }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#pkg:golang/google.golang.org/grpc@v1.81.1" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/google.golang.org/grpc@v1.81.1" } ] }, { "id": "GO-2026-5932", "source": { "name": "govulndb", "url": "https://pkg.go.dev/vuln/" }, "ratings": [], "description": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.", "advisories": [ { "url": "https://go.dev/issue/44226" }, { "url": "https://pkg.go.dev/vuln/GO-2026-5932" } ], "affects": [ { "ref": "pkg:golang/golang.org/x/crypto@v0.53.0", "versions": [ { "version": "v0.53.0", "status": "affected" } ] }, { "ref": "pkg:golang/golang.org/x/crypto@v0.53.0", "versions": [ { "version": "v0.53.0", "status": "affected" } ] }, { "ref": "urn:cdx:04332de6-0f13-4c66-9f38-0dcdbdf0eb33/1#82a3e8dc-83cf-487a-98c6-61584bd63564" }, { "ref": "urn:cdx:a5fbfea2-5cbb-4861-afcb-9fe05b662413/1#pkg:golang/golang.org/x/crypto@v0.53.0" } ], "analysis": { "state": "in_triage", "justification": "", "response": [], "detail": "This CVE is under investigation by Confluent." } } ] }