Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-248

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Information disclosure

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Denial of service

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-590

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-1050

Libsoup: out of bounds reads in soup_headers_parse_request()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: denial of service attack to websocket server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Denial of service

Yelp: arbitrary file read

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Open redirect

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Xorg: xwayland: use-after-free in syncinittrigger()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use-after-free in playreleasedevents()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: heap overflow in xkbwritekeysyms()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

X.org: xwayland: use-after-free of the root cursor

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Grub2: net: out-of-bounds write in grub_net_search_config_file()

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Rsync: path traversal vulnerability in rsync

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Path traversal

Rsync: info leak via uninitialized stack contents

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Memory corruption

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Networkmanager-libreswan: local privilege escalation via leftupdown

• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Code injection

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Ca: token authentication bypass vulnerability

• Red Hat Certificate System 10.4 EUS for RHEL-8
• Red Hat Enterprise Linux 7
• CWE-305

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

Libndp: buffer overflow in route information length field

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• Memory corruption