Red Hat Enterprise Linux 9.2 Extended Update Support.

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Information disclosure

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Denial of service

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-590

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-1050

Libsoup: out of bounds reads in soup_headers_parse_request()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-126

Libsoup: heap buffer overflow in sniff_unknown()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-126

Libsoup: integer overflow in append_param_quoted

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-127

Libsoup: denial of service attack to websocket server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Denial of service

Yelp: arbitrary file read

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Open redirect

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Xorg: xwayland: use-after-free in syncinittrigger()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use-after-free in playreleasedevents()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: heap overflow in xkbwritekeysyms()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

X.org: xwayland: use-after-free of the root cursor

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Grub2: net: out-of-bounds write in grub_net_search_config_file()

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Rsync: info leak via uninitialized stack contents

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Memory corruption

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

• Fast Datapath for Red Hat Enterprise Linux 7
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-20

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Networkmanager-libreswan: local privilege escalation via leftupdown

• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Code injection

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Libtiff: null pointer dereference in tif_dirinfo.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-662

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

389-ds-base: malformed userpassword hash may cause denial of service

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-1288

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Broken access control

Ca: token authentication bypass vulnerability

• Red Hat Certificate System 10.4 EUS for RHEL-8
• Red Hat Enterprise Linux 7
• CWE-305

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

Libndp: buffer overflow in route information length field

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

389-ds-base: potential denial of service via specially crafted kerberos as-req request

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-20

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.8 for RHEL 8
• CWE-20

Libvirt: stack use-after-free in virnetclientioeventloop()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-562

Rpm-ostree: world-readable /etc/shadow file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Broken access control

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Race condition

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Information disclosure

Gnutls: vulnerable to minerva side-channel information leak

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Weak cryptography or TLS

Gnutls: potential crash during chain building/verification

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-248

Libgcrypt: vulnerable to marvin attack

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-385

Xorg-x11-server: heap buffer overflow in disabledevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Broken access control

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• Memory corruption

Kernel: stack overflow problem in open vswitch kernel module leading to dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption