agentprime: red-hat-enterprise-linux-7-extended-lifecycle-supportEvery new CVE for red-hat-enterprise-linux-7-extended-lifecycle-support.https://agentprime.io/CVE-2026-114406: Ca-certificates: distrust emudhra intermediate ca certificates due to security concernshttps://agentprime.io/advisories/CVE-2026-114406/https://agentprime.io/advisories/CVE-2026-114406/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 20:56:26 GMTCVECVE-2026-102559: Libsoup: libsoup: heap buffer overflow during websocket client-frame maskinghttps://agentprime.io/advisories/CVE-2026-102559/https://agentprime.io/advisories/CVE-2026-102559/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:34 GMTCVECVE-2026-102558: Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growthhttps://agentprime.io/advisories/CVE-2026-102558/https://agentprime.io/advisories/CVE-2026-102558/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:32 GMTCVECVE-2026-102557: Libsoup: libsoup: heap buffer overflow during websocket message reassemblyhttps://agentprime.io/advisories/CVE-2026-102557/https://agentprime.io/advisories/CVE-2026-102557/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:57 GMTCVECVE-2026-102556: Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusionhttps://agentprime.io/advisories/CVE-2026-102556/https://agentprime.io/advisories/CVE-2026-102556/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:50 GMTCVECVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-18147: Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlhttps://agentprime.io/advisories/CVE-2026-18147/https://agentprime.io/advisories/CVE-2026-18147/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:39:18 GMTCVECVE-2026-74860: Libxml2: double-free/uaf in libxml2 python bindingshttps://agentprime.io/advisories/CVE-2026-74860/https://agentprime.io/advisories/CVE-2026-74860/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:27:45 GMTCVECVE-2026-76561: Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)https://agentprime.io/advisories/CVE-2026-76561/https://agentprime.io/advisories/CVE-2026-76561/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 07:55:29 GMTCVECVE-2026-18922: 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary propertyhttps://agentprime.io/advisories/CVE-2026-18922/https://agentprime.io/advisories/CVE-2026-18922/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:53 GMTCVEcriticalCVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchhttps://agentprime.io/advisories/CVE-2026-18453/https://agentprime.io/advisories/CVE-2026-18453/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:48 GMTCVECVE-2026-18355: 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()https://agentprime.io/advisories/CVE-2026-18355/https://agentprime.io/advisories/CVE-2026-18355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:43 GMTCVECVE-2026-76560: 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnhttps://agentprime.io/advisories/CVE-2026-76560/https://agentprime.io/advisories/CVE-2026-76560/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 13:18:09 GMTCVECVE-2026-76578: Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token acihttps://agentprime.io/advisories/CVE-2026-76578/https://agentprime.io/advisories/CVE-2026-76578/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:01:36 GMTCVEcriticalCVE-2026-81665: Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyhttps://agentprime.io/advisories/CVE-2026-81665/https://agentprime.io/advisories/CVE-2026-81665/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 09:05:35 GMTCVECVE-2026-84268: Gvfs: sftp: heap-based buffer overflow in read_reply()https://agentprime.io/advisories/CVE-2026-84268/https://agentprime.io/advisories/CVE-2026-84268/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:15:23 GMTCVECVE-2026-83596: Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeaturehttps://agentprime.io/advisories/CVE-2026-83596/https://agentprime.io/advisories/CVE-2026-83596/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 20:46:24 GMTCVECVE-2026-78376: Webkitgtk: use-after-free of jscvalue function parametershttps://agentprime.io/advisories/CVE-2026-78376/https://agentprime.io/advisories/CVE-2026-78376/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:29:17 GMTCVECVE-2026-11861: Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipshttps://agentprime.io/advisories/CVE-2026-11861/https://agentprime.io/advisories/CVE-2026-11861/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:39:08 GMTCVEcriticalCVE-2026-13097: Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastorehttps://agentprime.io/advisories/CVE-2026-13097/https://agentprime.io/advisories/CVE-2026-13097/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:37:55 GMTCVECVE-2026-73197: Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readhttps://agentprime.io/advisories/CVE-2026-73197/https://agentprime.io/advisories/CVE-2026-73197/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:31:31 GMTCVECVE-2026-18917: Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-18917/https://agentprime.io/advisories/CVE-2026-18917/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 09:54:50 GMTCVECVE-2026-73433: Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writehttps://agentprime.io/advisories/CVE-2026-73433/https://agentprime.io/advisories/CVE-2026-73433/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:27 GMTCVECVE-2026-73434: Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsinghttps://agentprime.io/advisories/CVE-2026-73434/https://agentprime.io/advisories/CVE-2026-73434/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:23 GMTCVECVE-2026-19550: Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writeshttps://agentprime.io/advisories/CVE-2026-19550/https://agentprime.io/advisories/CVE-2026-19550/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 20:46:42 GMTCVECVE-2026-63622: Libvirt: swtpm privilege escalation via symlink followinghttps://agentprime.io/advisories/CVE-2026-63622/https://agentprime.io/advisories/CVE-2026-63622/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:24 GMTCVECVE-2026-19387: Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderhttps://agentprime.io/advisories/CVE-2026-19387/https://agentprime.io/advisories/CVE-2026-19387/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 02:36:52 GMTCVECVE-2026-15816: Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()https://agentprime.io/advisories/CVE-2026-15816/https://agentprime.io/advisories/CVE-2026-15816/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 10:33:33 GMTCVECVE-2026-18649: Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadershttps://agentprime.io/advisories/CVE-2026-18649/https://agentprime.io/advisories/CVE-2026-18649/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 06:48:10 GMTCVECVE-2026-11770: 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkhttps://agentprime.io/advisories/CVE-2026-11770/https://agentprime.io/advisories/CVE-2026-11770/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 09:18:58 GMTCVECVE-2026-15722: 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsinghttps://agentprime.io/advisories/CVE-2026-15722/https://agentprime.io/advisories/CVE-2026-15722/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 09:18:50 GMTCVECVE-2026-16313: Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exporthttps://agentprime.io/advisories/CVE-2026-16313/https://agentprime.io/advisories/CVE-2026-16313/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 16:47:06 GMTCVECVE-2026-15588: Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferinghttps://agentprime.io/advisories/CVE-2026-15588/https://agentprime.io/advisories/CVE-2026-15588/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 12:12:06 GMTCVECVE-2026-59692: Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackhttps://agentprime.io/advisories/CVE-2026-59692/https://agentprime.io/advisories/CVE-2026-59692/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:35:31 GMTCVECVE-2026-59691: Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferhttps://agentprime.io/advisories/CVE-2026-59691/https://agentprime.io/advisories/CVE-2026-59691/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:34:47 GMTCVECVE-2026-11610: 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindhttps://agentprime.io/advisories/CVE-2026-11610/https://agentprime.io/advisories/CVE-2026-11610/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:17:36 GMTCVECVE-2026-14476: Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypasshttps://agentprime.io/advisories/CVE-2026-14476/https://agentprime.io/advisories/CVE-2026-14476/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:52 GMTCVECVE-2026-14474: Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationhttps://agentprime.io/advisories/CVE-2026-14474/https://agentprime.io/advisories/CVE-2026-14474/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:33 GMTCVECVE-2026-58016: Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"https://agentprime.io/advisories/CVE-2026-58016/https://agentprime.io/advisories/CVE-2026-58016/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 13:02:45 GMTCVECVE-2026-58015: Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receivehttps://agentprime.io/advisories/CVE-2026-58015/https://agentprime.io/advisories/CVE-2026-58015/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 13:02:45 GMTCVECVE-2026-58014: Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"https://agentprime.io/advisories/CVE-2026-58014/https://agentprime.io/advisories/CVE-2026-58014/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:35 GMTCVECVE-2026-58013: Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"https://agentprime.io/advisories/CVE-2026-58013/https://agentprime.io/advisories/CVE-2026-58013/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:34 GMTCVECVE-2026-58012: Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()https://agentprime.io/advisories/CVE-2026-58012/https://agentprime.io/advisories/CVE-2026-58012/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:21 GMTCVECVE-2026-58011: Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimehttps://agentprime.io/advisories/CVE-2026-58011/https://agentprime.io/advisories/CVE-2026-58011/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:15 GMTCVECVE-2026-58010: Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()https://agentprime.io/advisories/CVE-2026-58010/https://agentprime.io/advisories/CVE-2026-58010/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:15 GMTCVECVE-2026-12912: Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imagehttps://agentprime.io/advisories/CVE-2026-12912/https://agentprime.io/advisories/CVE-2026-12912/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 16:31:34 GMTCVECVE-2026-13601: Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationshttps://agentprime.io/advisories/CVE-2026-13601/https://agentprime.io/advisories/CVE-2026-13601/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 09:20:40 GMTCVECVE-2026-56208: Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modehttps://agentprime.io/advisories/CVE-2026-56208/https://agentprime.io/advisories/CVE-2026-56208/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:26 GMTCVECVE-2026-10649: Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressionhttps://agentprime.io/advisories/CVE-2026-10649/https://agentprime.io/advisories/CVE-2026-10649/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 15:57:38 GMTCVECVE-2026-42014: Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinhttps://agentprime.io/advisories/CVE-2026-42014/https://agentprime.io/advisories/CVE-2026-42014/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 00:49:15 GMTCVE