agentprime: red-hat-hardened-images

agentprime: red-hat-hardened-imagesEvery new CVE for red-hat-hardened-images.https://agentprime.io/CVE-2026-111253: Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transactionhttps://agentprime.io/advisories/CVE-2026-111253/https://agentprime.io/advisories/CVE-2026-111253/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:30:05 GMTCVECVE-2026-123151: Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailhttps://agentprime.io/advisories/CVE-2026-123151/https://agentprime.io/advisories/CVE-2026-123151/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:08:57 GMTCVECVE-2026-121997: Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchhttps://agentprime.io/advisories/CVE-2026-121997/https://agentprime.io/advisories/CVE-2026-121997/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:08:54 GMTCVECVE-2026-121996: Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthhttps://agentprime.io/advisories/CVE-2026-121996/https://agentprime.io/advisories/CVE-2026-121996/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:08:52 GMTCVECVE-2026-121995: Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailhttps://agentprime.io/advisories/CVE-2026-121995/https://agentprime.io/advisories/CVE-2026-121995/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:08:49 GMTCVECVE-2026-121994: Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthhttps://agentprime.io/advisories/CVE-2026-121994/https://agentprime.io/advisories/CVE-2026-121994/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:08:46 GMTCVECVE-2026-115456: Gcc: out-of-bounds read in std::from_charshttps://agentprime.io/advisories/CVE-2026-115456/https://agentprime.io/advisories/CVE-2026-115456/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:21:50 GMTCVECVE-2026-115455: Gcc: stack overflow in std::bitset on libstdc++https://agentprime.io/advisories/CVE-2026-115455/https://agentprime.io/advisories/CVE-2026-115455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:06 GMTCVECVE-2026-114691: Gcc: integer wrap in `stdhttps://agentprime.io/advisories/CVE-2026-114691/https://agentprime.io/advisories/CVE-2026-114691/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:05 GMTCVECVE-2026-114690: Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdhttps://agentprime.io/advisories/CVE-2026-114690/https://agentprime.io/advisories/CVE-2026-114690/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 07:13:04 GMTCVECVE-2026-85498: Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflowhttps://agentprime.io/advisories/CVE-2026-85498/https://agentprime.io/advisories/CVE-2026-85498/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:02:35 GMTCVECVE-2026-115207: Patch: filename validation bypass in reversal fallback allows file creation outside the working directoryhttps://agentprime.io/advisories/CVE-2026-115207/https://agentprime.io/advisories/CVE-2026-115207/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:16:12 GMTCVECVE-2026-85518: Openscap: openscap: arbitrary file write via path traversal in source datastream decompositionhttps://agentprime.io/advisories/CVE-2026-85518/https://agentprime.io/advisories/CVE-2026-85518/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 19:42:54 GMTCVECVE-2026-114236: Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layershttps://agentprime.io/advisories/CVE-2026-114236/https://agentprime.io/advisories/CVE-2026-114236/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:04:32 GMTCVECVE-2026-92824: Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactshttps://agentprime.io/advisories/CVE-2026-92824/https://agentprime.io/advisories/CVE-2026-92824/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:41 GMTCVECVE-2026-92822: Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlhttps://agentprime.io/advisories/CVE-2026-92822/https://agentprime.io/advisories/CVE-2026-92822/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:37 GMTCVECVE-2026-92823: Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlhttps://agentprime.io/advisories/CVE-2026-92823/https://agentprime.io/advisories/CVE-2026-92823/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 03:18:37 GMTCVECVE-2026-16460: Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationhttps://agentprime.io/advisories/CVE-2026-16460/https://agentprime.io/advisories/CVE-2026-16460/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 06:40:50 GMTCVECVE-2026-17591: Libarchive: libarchive: use-after-free via aliased mac metadata copyhttps://agentprime.io/advisories/CVE-2026-17591/https://agentprime.io/advisories/CVE-2026-17591/CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 22:03:40 GMTCVECVE-2026-85977: Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodinghttps://agentprime.io/advisories/CVE-2026-85977/https://agentprime.io/advisories/CVE-2026-85977/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 18:20:43 GMTCVECVE-2026-85231: Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodinghttps://agentprime.io/advisories/CVE-2026-85231/https://agentprime.io/advisories/CVE-2026-85231/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 18:20:40 GMTCVECVE-2026-88842: Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruptionhttps://agentprime.io/advisories/CVE-2026-88842/https://agentprime.io/advisories/CVE-2026-88842/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:02:05 GMTCVECVE-2026-88829: Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxyhttps://agentprime.io/advisories/CVE-2026-88829/https://agentprime.io/advisories/CVE-2026-88829/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:00:42 GMTCVECVE-2026-90954: Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flushhttps://agentprime.io/advisories/CVE-2026-90954/https://agentprime.io/advisories/CVE-2026-90954/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:00:08 GMTCVECVE-2026-88834: Busybox: busybox: httpd user existence oracle in non-default shadow-disabled buildshttps://agentprime.io/advisories/CVE-2026-88834/https://agentprime.io/advisories/CVE-2026-88834/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:58:04 GMTCVECVE-2026-88838: Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictionshttps://agentprime.io/advisories/CVE-2026-88838/https://agentprime.io/advisories/CVE-2026-88838/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:56:15 GMTCVECVE-2026-88833: Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of servicehttps://agentprime.io/advisories/CVE-2026-88833/https://agentprime.io/advisories/CVE-2026-88833/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:56:11 GMTCVECVE-2026-108119: Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fixhttps://agentprime.io/advisories/CVE-2026-108119/https://agentprime.io/advisories/CVE-2026-108119/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 16:45:59 GMTCVECVE-2026-107935: Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposehttps://agentprime.io/advisories/CVE-2026-107935/https://agentprime.io/advisories/CVE-2026-107935/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 09:05:43 GMTCVEcriticalCVE-2026-107655: Cups: null pointer dereference via embedded job ticket comments allows remote denial of servicehttps://agentprime.io/advisories/CVE-2026-107655/https://agentprime.io/advisories/CVE-2026-107655/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 08:55:35 GMTCVECVE-2026-107445: Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypasshttps://agentprime.io/advisories/CVE-2026-107445/https://agentprime.io/advisories/CVE-2026-107445/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 03:43:03 GMTCVECVE-2026-107444: Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypasshttps://agentprime.io/advisories/CVE-2026-107444/https://agentprime.io/advisories/CVE-2026-107444/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 03:41:31 GMTCVECVE-2026-107161: Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clientshttps://agentprime.io/advisories/CVE-2026-107161/https://agentprime.io/advisories/CVE-2026-107161/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 19:29:28 GMTCVECVE-2026-106033: Ansible: ansible-ui: ansible ui dom xss in /redirect next parameterhttps://agentprime.io/advisories/CVE-2026-106033/https://agentprime.io/advisories/CVE-2026-106033/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:18:06 GMTCVECVE-2026-105326: Cups: cups: argument injection in mailto notifier via notify-recipient-urihttps://agentprime.io/advisories/CVE-2026-105326/https://agentprime.io/advisories/CVE-2026-105326/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 18:58:56 GMTCVECVE-2026-95512: Freetype: freetype: denial of service via repeated subroutine allocations in cid font loaderhttps://agentprime.io/advisories/CVE-2026-95512/https://agentprime.io/advisories/CVE-2026-95512/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 09:05:11 GMTCVECVE-2026-103242: Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header taghttps://agentprime.io/advisories/CVE-2026-103242/https://agentprime.io/advisories/CVE-2026-103242/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:50:32 GMTCVECVE-2026-95520: Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packageshttps://agentprime.io/advisories/CVE-2026-95520/https://agentprime.io/advisories/CVE-2026-95520/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 11:02:06 GMTCVECVE-2026-102010: Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifhttps://agentprime.io/advisories/CVE-2026-102010/https://agentprime.io/advisories/CVE-2026-102010/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 18:54:31 GMTCVECVE-2026-95521: Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpmhttps://agentprime.io/advisories/CVE-2026-95521/https://agentprime.io/advisories/CVE-2026-95521/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 13:26:56 GMTCVECVE-2026-95519: Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)https://agentprime.io/advisories/CVE-2026-95519/https://agentprime.io/advisories/CVE-2026-95519/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 13:26:54 GMTCVECVE-2026-88840: Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthellohttps://agentprime.io/advisories/CVE-2026-88840/https://agentprime.io/advisories/CVE-2026-88840/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:45:34 GMTCVECVE-2026-88839: Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpointhttps://agentprime.io/advisories/CVE-2026-88839/https://agentprime.io/advisories/CVE-2026-88839/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:45:33 GMTCVECVE-2026-88837: Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authenticationhttps://agentprime.io/advisories/CVE-2026-88837/https://agentprime.io/advisories/CVE-2026-88837/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:45:31 GMTCVECVE-2026-88835: Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packageshttps://agentprime.io/advisories/CVE-2026-88835/https://agentprime.io/advisories/CVE-2026-88835/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:45:27 GMTCVECVE-2026-88831: Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengthshttps://agentprime.io/advisories/CVE-2026-88831/https://agentprime.io/advisories/CVE-2026-88831/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:45:23 GMTCVECVE-2026-88832: Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflowhttps://agentprime.io/advisories/CVE-2026-88832/https://agentprime.io/advisories/CVE-2026-88832/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:05:00 GMTCVECVE-2026-88830: Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-88830/https://agentprime.io/advisories/CVE-2026-88830/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:04:57 GMTCVECVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-95619: Gcc: libstdc++ integer overflow in `new` operatorhttps://agentprime.io/advisories/CVE-2026-95619/https://agentprime.io/advisories/CVE-2026-95619/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 12:52:02 GMTCVE