Red Hat Enterprise Linux Extended Update Support (EUS) 9.4

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Published: 2025-06-12T12:49:16.157Z
Updated: 2026-06-30T10:40:18.068Z

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0

Published: 2025-02-27T15:28:11.633Z
Updated: 2025-02-27T16:06:31.860Z

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.

Published: 2024-10-15T15:27:33.665Z
Updated: 2026-04-24T15:07:44.878Z