# Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Every CVE that names Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Linux-pam: linux-pam directory traversal](https://agentprime.io/advisories/CVE-2025-6020.md) `CVE-2025-6020` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Path traversal - [Libxml: heap use after free (uaf) leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49794.md) `CVE-2025-49794` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml2: stack buffer overflow in xmllint interactive shell command handling](https://agentprime.io/advisories/CVE-2025-6170.md) `CVE-2025-6170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml: type confusion leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49796.md) `CVE-2025-49796` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2](https://agentprime.io/advisories/CVE-2025-6021.md) `CVE-2025-6021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: Memory corruption - [Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5914.md) `CVE-2025-5914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: multiple use after free in xcf parser](https://agentprime.io/advisories/CVE-2025-48798.md) `CVE-2025-48798` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: multiple heap buffer overflows in tga parser](https://agentprime.io/advisories/CVE-2025-48797.md) `CVE-2025-48797` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus](https://agentprime.io/advisories/CVE-2025-5024.md) `CVE-2025-5024` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 22 May 2025 · Tags: Denial of service - [Libsoup: integer overflow in cookie expiration date handling in libsoup](https://agentprime.io/advisories/CVE-2025-4945.md) `CVE-2025-4945` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar](https://agentprime.io/advisories/CVE-2025-4373.md) `CVE-2025-4373` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption - [Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled](https://agentprime.io/advisories/CVE-2025-3891.md) `CVE-2025-3891` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-248 - [Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions](https://agentprime.io/advisories/CVE-2025-3576.md) `CVE-2025-3576` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Weak cryptography or TLS - [Libexpat: expat: improper restriction of xml entity expansion depth in libexpat](https://agentprime.io/advisories/CVE-2024-8176.md) `CVE-2024-8176` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Mar 2025 · Tags: Denial of service - [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md) `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md) `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .