Red Hat Enterprise Linux 10.

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Denial of service

Rsync: heap buffer overflow in rsync due to improper checksum length handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Freeipa: administrative user data leaked through systemd journal

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Information disclosure

Rsync: path traversal vulnerability in rsync

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Path traversal

Rsync: race condition in rsync handling symbolic links

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Race condition

Rsync: --safe-links option bypass leads to path traversal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Path traversal

Rsync: rsync server leaks arbitrary client files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-390

Rsync: info leak via uninitialized stack contents

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Ruby: openssl: ruby marvin attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-385

Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Openjpeg: heap buffer overflow in bin/common/color.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

• Fast Datapath for Red Hat Enterprise Linux 7
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-20

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Privilege escalation

Avahi: avahi wide-area dns uses constant source port

• avahi
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Samba: check attribute access rights for ldap adds of computers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Privilege escalation

Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1230

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Weak cryptography or TLS

Pam: improper hostname interpretation in pam_access leads to access control bypass

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Authentication bypass

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Pam: libpam: libpam vulnerable to read hashed password

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Networkmanager-libreswan: local privilege escalation via leftupdown

• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Code injection

Qemu-kvm: information leak in virtio devices

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Qemu-kvm: usb: assertion failure in usb_ep_get()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Libopensc: heap buffer overflow in openpgp driver when generating key

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Directory Server 11
• CWE-20

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: incorrect handling length of buffers or files in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-488

Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libtiff: null pointer dereference in tif_dirinfo.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-662

Libnbd: nbd server improper certificate validation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gtk3: gtk2: library injection from cwd

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Code injection

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

• Red Hat Directory Server 12.4 for RHEL 9
• Red Hat Enterprise Linux 9
• CWE-230

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Poppler: pdfinfo: crash in broken documents when using -dests parameter

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

389-ds-base: malformed userpassword hash may cause denial of service

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-1288

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

Libndp: buffer overflow in route information length field

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

389-ds-base: potential denial of service via specially crafted kerberos as-req request

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-20

Rpm-ostree: world-readable /etc/shadow file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Broken access control

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xz: malicious code in distributed source

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-506