Red Hat Enterprise Linux 8.2 Advanced Update Support.

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Memory corruption

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• HTTP request smuggling

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

• WebKitGTK
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-346

Glib: integer overflow in in g_escape_uri_string()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Grub2: missing unregister call for gettext command may lead to use-after-free

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Python-kdcproxy: remote dos via unbounded tcp upstream buffering

• latchset kdcproxy
• Red Hat Enterprise Linux 10
• Denial of service

Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv

• latchset kdcproxy
• Red Hat Enterprise Linux 10
• Server-side request forgery (SSRF)

Xorg: xmayland: use-after-free in xpresentnotify structure creation

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg: xwayland: use-after-free in xkb client resource removal

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg: xmayland: value overflow in xkbsetcompatmap()

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Privilege escalation

Freeipa: idm: privilege escalation from host to domain admin in freeipa

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-1220

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libtiff: libtiff write-what-where

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-123

Udisks: out-of-bounds read in udisks daemon

• storaged-project udisks
• Red Hat Enterprise Linux 10
• Memory corruption

Linux-pam: incomplete fix for cve-2025-6020

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Path traversal

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

• GNOME libxml2
• Red Hat Enterprise Linux 10
• Memory corruption

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libssh: out-of-bounds read in sftp_handle()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libblockdev: lpe from allow_active to root in libblockdev via udisks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Privilege escalation

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

• X.Org xwayland
• Red Hat Enterprise Linux 10
• CWE-667

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Freeipa: idm: privilege escalation from host to domain admin in freeipa

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-1220

Linux-pam: linux-pam directory traversal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Libxml: heap use after free (uaf) leads to denial of service (dos)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libxml: type confusion leads to denial of service (dos)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Gimp: multiple use after free in xcf parser

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: multiple heap buffer overflows in tga parser

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Libsoup: integer overflow in cookie expiration date handling in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-248

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Information disclosure

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Denial of service

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-590

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: out of bounds reads in soup_headers_parse_request()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: denial of service attack to websocket server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Denial of service

Yelp: arbitrary file read

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Open redirect

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Xorg: xwayland: use-after-free in syncinittrigger()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use-after-free in playreleasedevents()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption