A segmentation violation vulnerability exists in the gf_props_equal_internal function of the gpac software. This flaw can cause a crash or denial of service when the function is triggered. The vulnerability has a medium severity rating with a CVSS score of 5.5 and requires local access with user interaction to exploit.
A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
A medium severity vulnerability (CVE-2026-113724) affects multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact with low privileges required and no user interaction needed. It impacts confidentiality, integrity, and availability to a low degree. No public exploits or patches are currently documented.
A high-severity vulnerability (CVE-2026-113723) affects specific versions of python-virtualenv, a tool for creating isolated Python environments. The vulnerability has a CVSS 4.0 score of 7.1, indicating significant impact with local attack vector, high complexity, partial privileges required, and user interaction needed. No public exploit or patch information is provided.
A high-severity vulnerability (CVE-2026-113722) affects multiple specific versions of the python-virtualenv tool, which is used for creating isolated Python environments. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The affected versions include various releases from 1.10.1-1 through 15.1.0+ds-2build1. No public exploit code or known exploitation in the wild has been reported. No patch or remediation information is provided in the available data.
A medium severity vulnerability (CVE-2026-113721) affects multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 score of 4.5, indicating limited impact with low privileges required and no user interaction needed. The affected versions include various Debian and Ubuntu package builds. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.
CVE-2026-113720 is a medium severity vulnerability in python-virtualenv, a tool for creating isolated Python environments. The vulnerability affects multiple specific versions of python-virtualenv. The CVSS 4.0 score is 4.4, indicating a low to medium impact with local attack vector, high attack complexity, and partial privileges required. No public exploits or patches are currently documented.
A medium-severity vulnerability (CVE-2026-113719) affects specific versions of the Python virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact on confidentiality, integrity, and availability. It requires local access with low privileges and high attack complexity, with no user interaction needed. The affected versions include multiple specific package builds primarily associated with Ubuntu distributions. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the source data.
CVE-2026-113718 is a high-severity vulnerability affecting multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 7.1, indicating significant impact with local attack vector, high complexity, and partial user interaction required. The flaw affects a range of versions including various Debian and Ubuntu package builds. No public exploit or patch information is currently provided.
CVE-2026-113717 is a low-severity vulnerability affecting specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 2.3, indicating limited impact and requiring high attack complexity and partial user interaction for exploitation. No public exploits or known active exploitation have been reported. The affected versions include multiple specific package builds primarily associated with Ubuntu distributions.
CVE-2026-113716 is a medium severity vulnerability in python-virtualenv, a tool for creating isolated Python environments. It affects multiple specific package versions. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact on confidentiality, integrity, and availability. No public exploits or vendor patches are currently documented.
CVE-2026-113715 is a low severity vulnerability affecting specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The CVSS 4.0 score is 2.0, indicating low impact with local attack vector, high attack complexity, and partial privileges required. No public exploit or known active exploitation is reported. The affected versions include various specific package builds primarily for Ubuntu distributions.
CVE-2026-113714 is a low severity vulnerability affecting multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 2.3, indicating limited impact and complexity. No known exploits in the wild have been reported, and no patch or remediation details are provided in the available data.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.22.18. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:79150
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
Security Fix(es):
* kernel: futex: Fix race on the initial mm->futex.phash.ref allocation
(CVE-2026-80775)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.22 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.
Vite versions from 8.2.0 up to but not including 8.2.4 and version 8.3.3 have a vulnerability where the first 4 bytes of files outside the configured server.fs directory can be exposed to the browser. This occurs when a request includes the ?vite-wasm-instance query, which bypasses server.fs path checks and causes an error revealing file content. The issue is fixed in versions 8.2.4 and 8.3.3.
Vite versions prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3 have a vulnerability in import analysis where a root-relative browser URL can be recorded in safeModulePaths instead of the cleaned resolved module identifier. This can allow a network-accessible, non-Windows development server to authorize raw filesystem requests for certain host files outside the project root, potentially disclosing files. The vulnerability does not allow arbitrary path traversal and is fixed in the specified versions.
Vite versions prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3 have a vulnerability affecting applications using custom middleware that pass an unchanged browser request URL to server.transformIndexHtml. This flaw allows an attacker to craft a development-server page that causes the victim's browser to fetch and execute an attacker-controlled module, potentially exposing sensitive page data or enabling critical actions. The issue is fixed in the specified versions.
HarfBuzz versions 8.0.0 through 14.6.0 contain an out-of-bounds write vulnerability. This flaw could allow an attacker with local access and high attack complexity to cause a high impact on confidentiality, integrity, and availability. The vulnerability requires user interaction and does not involve privileges. It is rated as high severity with a CVSS score of 7. No public exploits or vendor patch information are provided in the data.
Python filelock is a platform-independent file locking library. A low severity vulnerability (CVE-2026-112941) affects multiple specific versions of python-filelock. The issue has a CVSS score of 3.3, indicating low impact, with limited integrity impact and no confidentiality or availability impact reported.
Python filelock is a platform-independent file locking library. A vulnerability identified as CVE-2026-112940 affects multiple specific versions of python-filelock. The vulnerability has a CVSS v3.1 score of 7.1, indicating high severity, with impact on integrity and availability but no confidentiality impact. No public exploits or vendor patch information are provided.