Red Hat Enterprise Linux for Power Little Endian 9.0 Ppc64le

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

Published: 2026-02-06T19:13:27.695Z
Updated: 2026-07-15T01:21:13.546Z

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Published: 2025-06-12T12:49:16.157Z
Updated: 2026-06-30T10:40:18.068Z

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Published: 2025-11-26T14:44:22.680Z
Updated: 2026-06-29T23:29:30.203Z