Red Hat Enterprise Linux 7.

Libssh: libssh: denial of service via inefficient regular expression processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Libssh: libssh: denial of service due to malformed sftp message

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: improper sanitation of paths received from scp servers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-170

Gimp: gimp: memory corruption due to integer overflow in ico file handling

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via crafted psp image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Polkit: polkit: denial of service via unbounded input processing through standard input

• Red Hat Enterprise Linux 10
• Red Hat Hardened Images
• Denial of service

Gstreamer: incomplete fix of cve-2026-1940

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: libarchive: denial of service via malformed iso file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-1335

Libsoup: libsoup: denial of service via use-after-free in http/2 server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: header and http request injection via crlf injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1286

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Broken access control

Libsoup: libsoup: authentication bypass via digest authentication replay attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-323

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-279

Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Server-side request forgery (SSRF)

Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-212

Qemu-kvm: unbounded allocation in virtio-crypto

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: secure boot does not automatically enable kernel lockdown

• Fedora Project Fedora Linux
• Red Hat Enterprise Linux 9
• Authentication bypass

Glibc: vdso getrandom acceleration may return predictable randomness

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-331

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: libsoup: http request smuggling via malformed chunk headers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Libsoup: soupserver: denial of service via http request smuggling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Libxml2: memory leak leading to local denial of service in xmllint interactive shell

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libsoup: libsoup: credential leakage via http redirects

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Glib: glib: memory corruption via integer overflow in unicode case conversion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib: glib: local denial of service via buffer underflow in content type parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Networkmanager: networkmanager file access

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-281

Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libxml2: libxml2: denial of service via crafted xml catalogs

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: unbounded relaxng include recursion leading to stack overflow

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: out-of-bounds read in libsoup websocket frame processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

• WebKitGTK
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-346

Abrt: command-injection in abrt leading to local privilege escalation

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Command injection

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Grub2: use-after-free in net_set_vlan

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: missing unregister call for normal_exit command may lead to use-after-free

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: missing unregister call for normal commands may lead to use-after-free

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: grub2: out-of-bounds write via malicious usb device

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption