Red Hat Enterprise Linux 8.2 Advanced Update Support.

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: heap overflow in xkbwritekeysyms()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

X.org: xwayland: use-after-free of the root cursor

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Grub2: net: out-of-bounds write in grub_net_search_config_file()

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Rsync: path traversal vulnerability in rsync

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Path traversal

Rsync: info leak via uninitialized stack contents

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Networkmanager-libreswan: local privilege escalation via leftupdown

• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Code injection

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Libndp: buffer overflow in route information length field

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Information disclosure

Xorg-x11-server: heap buffer overflow in disabledevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Broken access control

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Shim: out of bounds read when parsing mz binaries

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read printing error messages

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: out-of-bound read in verify_buffer_sbat()

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Shim: rce in http boot support may lead to secure boot bypass

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Ipa: invalid csrf protection

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Cross-site request forgery (CSRF)

Kernel: refcount leak in ctnetlink_create_conntrack()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Denial of service

Kernel: gsm multiplexing race condition leads to privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-366

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Postgresql: role pg_signal_backend can signal certain superuser processes.

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• Denial of service

Postgresql: memory disclosure in aggregate function calls

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• CWE-686

Postgresql: buffer overrun from integer overflow in array modification

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 7
• Memory corruption

Squid: denial of service in http digest authentication

• Red Hat Enterprise Linux 6 Extended Lifecycle Support
• Red Hat Enterprise Linux 7
• Memory corruption

Squid: dos against http and https

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-755

Squid: request/response smuggling in http/1.1 and icap

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• HTTP request smuggling

Kernel: use after free in nvmet_tcp_free_crypto in nvme

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Insights-client: unsafe handling of temporary files and directories

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-379

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Tracker-miners: sandbox escape

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-693

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Memory corruption

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Broken access control

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Memory corruption

Postgresql: extension script @substitutions@ within quoting allow sql injection

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• SQL injection

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
• Memory corruption