agentprime: red-hat-enterprise-linux-10-0-extended-update-supportEvery new CVE for red-hat-enterprise-linux-10-0-extended-update-support.https://agentprime.io/CVE-2026-114406: Ca-certificates: distrust emudhra intermediate ca certificates due to security concernshttps://agentprime.io/advisories/CVE-2026-114406/https://agentprime.io/advisories/CVE-2026-114406/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 20:56:26 GMTCVECVE-2026-102560: Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthhttps://agentprime.io/advisories/CVE-2026-102560/https://agentprime.io/advisories/CVE-2026-102560/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:36 GMTCVECVE-2026-102559: Libsoup: libsoup: heap buffer overflow during websocket client-frame maskinghttps://agentprime.io/advisories/CVE-2026-102559/https://agentprime.io/advisories/CVE-2026-102559/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:34 GMTCVECVE-2026-102558: Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growthhttps://agentprime.io/advisories/CVE-2026-102558/https://agentprime.io/advisories/CVE-2026-102558/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:32 GMTCVECVE-2026-102555: Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decodinghttps://agentprime.io/advisories/CVE-2026-102555/https://agentprime.io/advisories/CVE-2026-102555/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:14 GMTCVECVE-2026-102557: Libsoup: libsoup: heap buffer overflow during websocket message reassemblyhttps://agentprime.io/advisories/CVE-2026-102557/https://agentprime.io/advisories/CVE-2026-102557/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:57 GMTCVECVE-2026-102556: Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusionhttps://agentprime.io/advisories/CVE-2026-102556/https://agentprime.io/advisories/CVE-2026-102556/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:50 GMTCVECVE-2026-97024: Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etchttps://agentprime.io/advisories/CVE-2026-97024/https://agentprime.io/advisories/CVE-2026-97024/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 03:23:00 GMTCVECVE-2026-97023: Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/binhttps://agentprime.io/advisories/CVE-2026-97023/https://agentprime.io/advisories/CVE-2026-97023/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 18:53:28 GMTCVECVE-2026-96280: Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systemshttps://agentprime.io/advisories/CVE-2026-96280/https://agentprime.io/advisories/CVE-2026-96280/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 20:19:12 GMTCVECVE-2026-96275: Flatpak: flatpak: arbitrary write access as root via extra-data extractionhttps://agentprime.io/advisories/CVE-2026-96275/https://agentprime.io/advisories/CVE-2026-96275/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 15:01:38 GMTCVECVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-80110: Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpointhttps://agentprime.io/advisories/CVE-2026-80110/https://agentprime.io/advisories/CVE-2026-80110/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:05:16 GMTCVECVE-2026-89058: Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard confighttps://agentprime.io/advisories/CVE-2026-89058/https://agentprime.io/advisories/CVE-2026-89058/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:20:29 GMTCVECVE-2026-89059: Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)https://agentprime.io/advisories/CVE-2026-89059/https://agentprime.io/advisories/CVE-2026-89059/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:13:39 GMTCVECVE-2026-86320: Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)https://agentprime.io/advisories/CVE-2026-86320/https://agentprime.io/advisories/CVE-2026-86320/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 07:27:33 GMTCVECVE-2026-88924: Gvfs: gvfs-admin socket ownership race permits local roothttps://agentprime.io/advisories/CVE-2026-88924/https://agentprime.io/advisories/CVE-2026-88924/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 14:32:30 GMTCVECVE-2026-18147: Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlhttps://agentprime.io/advisories/CVE-2026-18147/https://agentprime.io/advisories/CVE-2026-18147/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:39:18 GMTCVECVE-2026-87766: Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setuphttps://agentprime.io/advisories/CVE-2026-87766/https://agentprime.io/advisories/CVE-2026-87766/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 08:34:35 GMTCVECVE-2026-74860: Libxml2: double-free/uaf in libxml2 python bindingshttps://agentprime.io/advisories/CVE-2026-74860/https://agentprime.io/advisories/CVE-2026-74860/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:27:45 GMTCVECVE-2026-76561: Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)https://agentprime.io/advisories/CVE-2026-76561/https://agentprime.io/advisories/CVE-2026-76561/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 07:55:29 GMTCVECVE-2026-18922: 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary propertyhttps://agentprime.io/advisories/CVE-2026-18922/https://agentprime.io/advisories/CVE-2026-18922/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:53 GMTCVEcriticalCVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchhttps://agentprime.io/advisories/CVE-2026-18453/https://agentprime.io/advisories/CVE-2026-18453/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:48 GMTCVECVE-2026-18355: 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()https://agentprime.io/advisories/CVE-2026-18355/https://agentprime.io/advisories/CVE-2026-18355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:43 GMTCVECVE-2026-76560: 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnhttps://agentprime.io/advisories/CVE-2026-76560/https://agentprime.io/advisories/CVE-2026-76560/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 13:18:09 GMTCVECVE-2026-79678: Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of servicehttps://agentprime.io/advisories/CVE-2026-79678/https://agentprime.io/advisories/CVE-2026-79678/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:02:21 GMTCVECVE-2026-76578: Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token acihttps://agentprime.io/advisories/CVE-2026-76578/https://agentprime.io/advisories/CVE-2026-76578/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:01:36 GMTCVEcriticalCVE-2026-81665: Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyhttps://agentprime.io/advisories/CVE-2026-81665/https://agentprime.io/advisories/CVE-2026-81665/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 09:05:35 GMTCVECVE-2026-85197: Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body uploadhttps://agentprime.io/advisories/CVE-2026-85197/https://agentprime.io/advisories/CVE-2026-85197/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 07:34:31 GMTCVECVE-2026-84268: Gvfs: sftp: heap-based buffer overflow in read_reply()https://agentprime.io/advisories/CVE-2026-84268/https://agentprime.io/advisories/CVE-2026-84268/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:15:23 GMTCVECVE-2026-78002: Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionhttps://agentprime.io/advisories/CVE-2026-78002/https://agentprime.io/advisories/CVE-2026-78002/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 16:12:59 GMTCVECVE-2026-11861: Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipshttps://agentprime.io/advisories/CVE-2026-11861/https://agentprime.io/advisories/CVE-2026-11861/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:39:08 GMTCVEcriticalCVE-2026-73198: Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body readhttps://agentprime.io/advisories/CVE-2026-73198/https://agentprime.io/advisories/CVE-2026-73198/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:39:00 GMTCVECVE-2026-13097: Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastorehttps://agentprime.io/advisories/CVE-2026-13097/https://agentprime.io/advisories/CVE-2026-13097/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:37:55 GMTCVECVE-2026-73197: Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readhttps://agentprime.io/advisories/CVE-2026-73197/https://agentprime.io/advisories/CVE-2026-73197/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:31:31 GMTCVECVE-2026-18917: Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-18917/https://agentprime.io/advisories/CVE-2026-18917/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 09:54:50 GMTCVECVE-2026-19654: Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdhttps://agentprime.io/advisories/CVE-2026-19654/https://agentprime.io/advisories/CVE-2026-19654/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 20:46:31 GMTCVECVE-2026-73433: Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writehttps://agentprime.io/advisories/CVE-2026-73433/https://agentprime.io/advisories/CVE-2026-73433/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:27 GMTCVECVE-2026-73434: Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsinghttps://agentprime.io/advisories/CVE-2026-73434/https://agentprime.io/advisories/CVE-2026-73434/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:23 GMTCVECVE-2026-19550: Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writeshttps://agentprime.io/advisories/CVE-2026-19550/https://agentprime.io/advisories/CVE-2026-19550/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 20:46:42 GMTCVECVE-2026-72694: Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationhttps://agentprime.io/advisories/CVE-2026-72694/https://agentprime.io/advisories/CVE-2026-72694/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 08:37:55 GMTCVECVE-2026-63622: Libvirt: swtpm privilege escalation via symlink followinghttps://agentprime.io/advisories/CVE-2026-63622/https://agentprime.io/advisories/CVE-2026-63622/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:24 GMTCVECVE-2026-19389: Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds readhttps://agentprime.io/advisories/CVE-2026-19389/https://agentprime.io/advisories/CVE-2026-19389/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 02:57:42 GMTCVECVE-2026-19387: Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderhttps://agentprime.io/advisories/CVE-2026-19387/https://agentprime.io/advisories/CVE-2026-19387/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 02:36:52 GMTCVECVE-2026-15816: Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()https://agentprime.io/advisories/CVE-2026-15816/https://agentprime.io/advisories/CVE-2026-15816/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 10:33:33 GMTCVECVE-2026-7867: Udisks2: udisks2: local privilege escalation via as-user option spoofinghttps://agentprime.io/advisories/CVE-2026-7867/https://agentprime.io/advisories/CVE-2026-7867/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:36:02 GMTCVECVE-2026-18649: Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadershttps://agentprime.io/advisories/CVE-2026-18649/https://agentprime.io/advisories/CVE-2026-18649/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 06:48:10 GMTCVECVE-2026-71227: Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnhttps://agentprime.io/advisories/CVE-2026-71227/https://agentprime.io/advisories/CVE-2026-71227/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:42:10 GMTCVECVE-2026-71226: Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathhttps://agentprime.io/advisories/CVE-2026-71226/https://agentprime.io/advisories/CVE-2026-71226/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:37:17 GMTCVECVE-2026-71225: Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundarieshttps://agentprime.io/advisories/CVE-2026-71225/https://agentprime.io/advisories/CVE-2026-71225/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:16:52 GMTCVE