Red Hat Enterprise Linux 8.

Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: null dereference in minput_open_im() after failed m17n_init()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via race condition in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via incomplete identity provider authentication requests

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1025

Sssd: sssd: information disclosure via query injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via crafted passkey kerberos authentication request

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via undersized packet parsing in nss responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read in pam responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via unbounded negative cache growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: information disclosure via odata injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via missing sid extension in certificate mapping

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via packet length underflow in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via premature ldap access rule evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-393

Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via memory exhaustion in kcm responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via use-after-free in kcm ticket renewal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via improper ldap shadow expiration check

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-193

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-408

Sssd: sssd: denial of service via memory exhaustion in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cups: cups: argument injection in mailto notifier via notify-recipient-uri

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject

• Red Hat Certificate System 10
• Red Hat Certificate System 11
• Authentication bypass

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

• Red Hat Hardened Images
• Red Hat build of OpenJDK 11 ELS
• Denial of service

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-923

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-653

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-61

Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-20

Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-378

Flatpak: flatpak: world-readable oci authentication token in system-helper cache path

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-378

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-61

Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Flatpak: flatpak: extension metadata path traversal file existence oracle

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Broken access control

Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Broken access control

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-197

Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection