https://db.gcve.eu/cna-root/redhat/recent 2026-08-27T23:19:17.320442+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. https://db.gcve.eu/vuln/cve-2026-18374 2026-08-27T19:20:40.426000+00:00 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and applications that process user-supplied values for `ccs` should not pass them through without validation.

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and applications that process user-supplied values for `ccs` should not pass them through without validation.

2026-08-27T19:20:40.426000+00:00 https://db.gcve.eu/vuln/cve-2026-81893 2026-08-27T18:34:03.016000+00:00 Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery

Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery

2026-08-27T18:34:03.016000+00:00 https://db.gcve.eu/vuln/cve-2026-5680 2026-08-27T16:25:29.103000+00:00 Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Undertow-core: undertow: denial of service via websocket permessage-deflate processing

2026-08-27T16:25:29.103000+00:00 https://db.gcve.eu/vuln/cve-2026-78002 2026-08-27T16:12:59.102000+00:00 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

2026-08-27T16:12:59.102000+00:00 https://db.gcve.eu/vuln/cve-2026-81668 2026-08-27T11:15:42.330000+00:00 Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup

Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup

2026-08-27T11:15:42.330000+00:00 https://db.gcve.eu/vuln/cve-2026-81658 2026-08-27T10:22:08.586000+00:00 Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

2026-08-27T10:22:08.586000+00:00 https://db.gcve.eu/vuln/cve-2026-80158 2026-08-26T22:06:07.301000+00:00 Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

2026-08-26T22:06:07.301000+00:00 https://db.gcve.eu/vuln/cve-2026-77652 2026-08-26T19:21:39.936000+00:00 Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index

Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index

2026-08-26T19:21:39.936000+00:00 https://db.gcve.eu/vuln/cve-2026-79902 2026-08-26T13:34:24.555000+00:00 Gimp: stack vla size underflow denial of service in seattle

Gimp: stack vla size underflow denial of service in seattle

2026-08-26T13:34:24.555000+00:00 https://db.gcve.eu/vuln/cve-2026-77658 2026-08-26T12:10:07.556000+00:00 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files

Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files

2026-08-26T12:10:07.556000+00:00