Threat database

Multiple security vulnerabilities affecting the Python 3.12 implementation in Red Hat Enterprise Linux 9 have been addressed. These issues involve bypasses of extraction filters in the tarfile module, allowing modification of file metadata, creation of symbolic links, and arbitrary writes outside the intended extraction directory. The update fixes five CVEs related to these extraction filter bypasses and realpath overflow issues. Red Hat has released a security update rated as Important to remediate these vulnerabilities.

CVE-2025-46397 is a high-severity vulnerability in xfig caused by a buffer copy operation without checking the size of input in the bezier_spline function. This flaw can lead to a stack overflow, potentially allowing local code execution through manipulated input. The vulnerability affects the xfig utility used for creating FIG or PIC figures and translating them into LaTeX graphics languages. A security update addressing this issue is available from Red Hat as part of the transfig package update.

Multiple denial of service (DoS) vulnerabilities and a userinfo leakage issue have been identified in Ruby 3.1 components, including REXML, CGI, and URI modules. These vulnerabilities could allow attackers to cause service disruption or leak sensitive user information when processing specially crafted inputs. Red Hat has issued a security update for Ruby 3.1 on Red Hat Enterprise Linux 8 to address these issues.

Red Hat OpenShift Container Platform 4.17.21 includes a security update addressing a kernel vulnerability (CVE-2024-53197) related to ALSA usb-audio drivers. The flaw involves potential out-of-bound memory accesses for Extigy and Mbox devices. This update is rated as important by Red Hat Product Security. Users of OpenShift Container Platform 4.17 are advised to upgrade to the updated packages and container images when available via the appropriate release channels.

FontForge, a font editor supporting multiple font formats, has two command injection vulnerabilities (CVE-2024-25081 and CVE-2024-25082) that can be triggered via crafted filenames or archives/compressed files. These vulnerabilities were addressed in a security update released by Red Hat for Red Hat Enterprise Linux 9. The update is rated as having a moderate security impact. Users of affected Red Hat CodeReady Linux Builder products should apply the update as per Red Hat's advisory.

A moderate severity vulnerability (CVE-2024-6119) in OpenSSL affects Red Hat Enterprise Linux 9. The flaw involves a possible denial of service caused by issues in X.509 name checks. Red Hat has released security updates to address this issue.

Red Hat has issued a security advisory for the pcs packages used to configure Pacemaker and Corosync utilities. The update addresses multiple denial-of-service (DoS) vulnerabilities in the rubygem-rexml XML parsing library, specifically CVE-2024-41123, CVE-2024-41946, and CVE-2024-43398. These vulnerabilities occur when parsing XML containing many specific characters such as whitespace, >], and ]>. The advisory rates the impact as moderate and provides updated package versions for Red Hat Enterprise Linux 8.6 variants.

CVE-2024-7358 is a high-severity vulnerability in Point B Ltd Getscreen Agent up to versions 2.19.6 and 3.9.4 on Windows. It involves the creation of a temporary file with insecure permissions by the MSI Installer component. The vulnerability requires local access to exploit and has publicly available exploit code. Upgrading to version 3.9.5 mitigates the issue.

Red Hat has released an update for Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 (RHBQ 3.2.11) addressing multiple security issues. These include denial of service vulnerabilities and memory leaks in components such as commons-compress and vertx-core. The update aims to improve security and stability by fixing infinite loops, out-of-memory errors, and memory leaks related to TCP server TLS/SNI configurations and Netty FastThreadLocal usage.