Red Hat Enterprise Linux 8.

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

• GNOME libxslt
• Red Hat Enterprise Linux 10
• Memory corruption

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

• GNOME libxml2
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: vulnerability in gnutls certtool template parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gnutls: vulnerability in gnutls sct extension parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gnutls: vulnerability in gnutls othername san export

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libssh: invalid return code for chacha20 poly1305 with openssl backend

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-393

Libssh: double free vulnerability in libssh key export functions

• libssh
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: incorrect return code handling in ssh_kdf() in libssh

• libssh
• Red Hat Enterprise Linux 8
• CWE-682

Libssh: out-of-bounds read in sftp_handle()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libblockdev: lpe from allow_active to root in libblockdev via udisks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Privilege escalation

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

• X.Org xwayland
• Red Hat Enterprise Linux 10
• CWE-667

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Information disclosure

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Freeipa: idm: privilege escalation from host to domain admin in freeipa

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-1220

Linux-pam: linux-pam directory traversal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Libxml: heap use after free (uaf) leads to denial of service (dos)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libxml2: stack buffer overflow in xmllint interactive shell command handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libxml: null pointer dereference leads to denial of service (dos)

• GNOME libxml2
• Red Hat Enterprise Linux 10
• Memory corruption

Libxml: type confusion leads to denial of service (dos)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp integer overflow

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libarchive: reading past eof may be triggered for piped file streams

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-193

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-364

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Icu: stack buffer overflow in the srbroot::addtag function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Gimp: multiple use after free in xcf parser

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: multiple heap buffer overflows in tga parser

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: stack-based buffer overflows in file-ico

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: integer overflow in cookie expiration date handling in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in libsoup may lead to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Authentication bypass

Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: cookie domain validation bypass via uppercase characters in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-178

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-248

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Information disclosure

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Denial of service

Xfig: fig2dev segmentation fault in read_arcobject

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Xfig: transfig: fig2dev segmentation fault vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Xfig: fig2dev stack-overflow via read_objects

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-590

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS