agentprime: red-hat-enterprise-linux-9-4-extended-update-support

agentprime: red-hat-enterprise-linux-9-4-extended-update-supportEvery new CVE for red-hat-enterprise-linux-9-4-extended-update-support.https://agentprime.io/CVE-2026-4802: Cockpit: cockpit: arbitrary command execution via crafted links in system logs uihttps://agentprime.io/advisories/CVE-2026-4802/https://agentprime.io/advisories/CVE-2026-4802/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 12:48:08 GMTCVECVE-2026-34002: Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlinghttps://agentprime.io/advisories/CVE-2026-34002/https://agentprime.io/advisories/CVE-2026-34002/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 14:41:10 GMTCVECVE-2026-34000: Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.https://agentprime.io/advisories/CVE-2026-34000/https://agentprime.io/advisories/CVE-2026-34000/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 14:41:05 GMTCVECVE-2026-34003: Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2026-34003/https://agentprime.io/advisories/CVE-2026-34003/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Apr 2026 14:54:05 GMTCVECVE-2026-34001: Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionhttps://agentprime.io/advisories/CVE-2026-34001/https://agentprime.io/advisories/CVE-2026-34001/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Apr 2026 14:54:00 GMTCVECVE-2026-33999: Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlinghttps://agentprime.io/advisories/CVE-2026-33999/https://agentprime.io/advisories/CVE-2026-33999/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Apr 2026 14:53:59 GMTCVECVE-2026-4878: Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()https://agentprime.io/advisories/CVE-2026-4878/https://agentprime.io/advisories/CVE-2026-4878/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 14:49:02 GMTCVECVE-2026-35092: Corosync: corosync: denial of service via integer overflow in join message validationhttps://agentprime.io/advisories/CVE-2026-35092/https://agentprime.io/advisories/CVE-2026-35092/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 13:18:55 GMTCVECVE-2026-35091: Corosync: corosync: denial of service and information disclosure via crafted udp packethttps://agentprime.io/advisories/CVE-2026-35091/https://agentprime.io/advisories/CVE-2026-35091/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 13:18:53 GMTCVECVE-2026-5201: Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imagehttps://agentprime.io/advisories/CVE-2026-5201/https://agentprime.io/advisories/CVE-2026-5201/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 08:32:58 GMTCVECVE-2026-5121: Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processinghttps://agentprime.io/advisories/CVE-2026-5121/https://agentprime.io/advisories/CVE-2026-5121/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 07:47:28 GMTCVECVE-2026-4775: Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processinghttps://agentprime.io/advisories/CVE-2026-4775/https://agentprime.io/advisories/CVE-2026-4775/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 14:42:47 GMTCVECVE-2026-4424: Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processinghttps://agentprime.io/advisories/CVE-2026-4424/https://agentprime.io/advisories/CVE-2026-4424/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Mar 2026 13:50:27 GMTCVECVE-2026-4111: Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivehttps://agentprime.io/advisories/CVE-2026-4111/https://agentprime.io/advisories/CVE-2026-4111/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 11:45:20 GMTCVECVE-2025-12801: Nfs-utils: rpc.mountd in the nfs-utils privilege escalationhttps://agentprime.io/advisories/CVE-2025-12801/https://agentprime.io/advisories/CVE-2025-12801/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 15:25:53 GMTCVECVE-2025-14831: Gnutls: gnutls: denial of service via excessive resource consumption during certificate verificationhttps://agentprime.io/advisories/CVE-2025-14831/https://agentprime.io/advisories/CVE-2025-14831/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 14:51:32 GMTCVECVE-2026-1761: Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responsehttps://agentprime.io/advisories/CVE-2026-1761/https://agentprime.io/advisories/CVE-2026-1761/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 14:01:03 GMTCVECVE-2025-14242: Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsinghttps://agentprime.io/advisories/CVE-2025-14242/https://agentprime.io/advisories/CVE-2025-14242/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Jan 2026 15:23:03 GMTCVECVE-2026-0719: Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationhttps://agentprime.io/advisories/CVE-2026-0719/https://agentprime.io/advisories/CVE-2026-0719/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 12:38:30 GMTCVECVE-2025-14523: Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)https://agentprime.io/advisories/CVE-2025-14523/https://agentprime.io/advisories/CVE-2025-14523/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 12:30:59 GMTCVECVE-2025-14512: Glib: integer overflow in glib gio attribute escaping causes heap buffer overflowhttps://agentprime.io/advisories/CVE-2025-14512/https://agentprime.io/advisories/CVE-2025-14512/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 07:11:02 GMTCVECVE-2025-14087: Glib: glib: buffer underflow in gvariant parser leads to heap corruptionhttps://agentprime.io/advisories/CVE-2025-14087/https://agentprime.io/advisories/CVE-2025-14087/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Dec 2025 09:01:34 GMTCVECVE-2025-66287: Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crashhttps://agentprime.io/advisories/CVE-2025-66287/https://agentprime.io/advisories/CVE-2025-66287/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Dec 2025 16:48:31 GMTCVECVE-2025-13947: Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drophttps://agentprime.io/advisories/CVE-2025-13947/https://agentprime.io/advisories/CVE-2025-13947/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 09:45:59 GMTCVECVE-2025-13601: Glib: integer overflow in in g_escape_uri_string()https://agentprime.io/advisories/CVE-2025-13601/https://agentprime.io/advisories/CVE-2025-13601/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 14:44:22 GMTCVECVE-2025-13502: Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to doshttps://agentprime.io/advisories/CVE-2025-13502/https://agentprime.io/advisories/CVE-2025-13502/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 08:02:26 GMTCVECVE-2025-61662: Grub2: missing unregister call for gettext command may lead to use-after-freehttps://agentprime.io/advisories/CVE-2025-61662/https://agentprime.io/advisories/CVE-2025-61662/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 18:20:48 GMTCVECVE-2025-59089: Python-kdcproxy: remote dos via unbounded tcp upstream bufferinghttps://agentprime.io/advisories/CVE-2025-59089/https://agentprime.io/advisories/CVE-2025-59089/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 16:40:50 GMTCVECVE-2025-59088: Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvhttps://agentprime.io/advisories/CVE-2025-59088/https://agentprime.io/advisories/CVE-2025-59088/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 16:35:27 GMTCVECVE-2025-62229: Xorg: xmayland: use-after-free in xpresentnotify structure creationhttps://agentprime.io/advisories/CVE-2025-62229/https://agentprime.io/advisories/CVE-2025-62229/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:28:48 GMTCVECVE-2025-62230: Xorg: xwayland: use-after-free in xkb client resource removalhttps://agentprime.io/advisories/CVE-2025-62230/https://agentprime.io/advisories/CVE-2025-62230/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:19:40 GMTCVECVE-2025-62231: Xorg: xmayland: value overflow in xkbsetcompatmap()https://agentprime.io/advisories/CVE-2025-62231/https://agentprime.io/advisories/CVE-2025-62231/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:08:32 GMTCVECVE-2025-11561: Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemshttps://agentprime.io/advisories/CVE-2025-11561/https://agentprime.io/advisories/CVE-2025-11561/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 13:37:53 GMTCVECVE-2025-11234: Qemu-kvm: vnc websocket handshake use-after-freehttps://agentprime.io/advisories/CVE-2025-11234/https://agentprime.io/advisories/CVE-2025-11234/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 10:30:34 GMTCVECVE-2025-7493: Freeipa: idm: privilege escalation from host to domain admin in freeipahttps://agentprime.io/advisories/CVE-2025-7493/https://agentprime.io/advisories/CVE-2025-7493/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 15:06:46 GMTCVEcriticalCVE-2025-11021: Libsoup: out-of-bounds read in cookie date handling of libsoup http libraryhttps://agentprime.io/advisories/CVE-2025-11021/https://agentprime.io/advisories/CVE-2025-11021/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 08:36:19 GMTCVECVE-2025-9900: Libtiff: libtiff write-what-wherehttps://agentprime.io/advisories/CVE-2025-9900/https://agentprime.io/advisories/CVE-2025-9900/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 16:26:22 GMTCVECVE-2025-8067: Udisks: out-of-bounds read in udisks daemonhttps://agentprime.io/advisories/CVE-2025-8067/https://agentprime.io/advisories/CVE-2025-8067/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 14:47:08 GMTCVECVE-2025-8941: Linux-pam: incomplete fix for cve-2025-6020https://agentprime.io/advisories/CVE-2025-8941/https://agentprime.io/advisories/CVE-2025-8941/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 14:42:37 GMTCVECVE-2025-6395: Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()https://agentprime.io/advisories/CVE-2025-6395/https://agentprime.io/advisories/CVE-2025-6395/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 15:20:46 GMTCVECVE-2025-7425: Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrhttps://agentprime.io/advisories/CVE-2025-7425/https://agentprime.io/advisories/CVE-2025-7425/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 13:53:37 GMTCVECVE-2025-32990: Gnutls: vulnerability in gnutls certtool template parsinghttps://agentprime.io/advisories/CVE-2025-32990/https://agentprime.io/advisories/CVE-2025-32990/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 09:41:46 GMTCVECVE-2025-32989: Gnutls: vulnerability in gnutls sct extension parsinghttps://agentprime.io/advisories/CVE-2025-32989/https://agentprime.io/advisories/CVE-2025-32989/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 08:05:26 GMTCVECVE-2025-32988: Gnutls: vulnerability in gnutls othername san exporthttps://agentprime.io/advisories/CVE-2025-32988/https://agentprime.io/advisories/CVE-2025-32988/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 08:04:57 GMTCVECVE-2025-7345: Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufhttps://agentprime.io/advisories/CVE-2025-7345/https://agentprime.io/advisories/CVE-2025-7345/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 13:39:07 GMTCVECVE-2025-5987: Libssh: invalid return code for chacha20 poly1305 with openssl backendhttps://agentprime.io/advisories/CVE-2025-5987/https://agentprime.io/advisories/CVE-2025-5987/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:24:12 GMTCVECVE-2025-5318: Libssh: out-of-bounds read in sftp_handle()https://agentprime.io/advisories/CVE-2025-5318/https://agentprime.io/advisories/CVE-2025-5318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 14:10:07 GMTCVECVE-2025-6019: Libblockdev: lpe from allow_active to root in libblockdev via udiskshttps://agentprime.io/advisories/CVE-2025-6019/https://agentprime.io/advisories/CVE-2025-6019/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 11:55:57 GMTCVECVE-2025-49180: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionhttps://agentprime.io/advisories/CVE-2025-49180/https://agentprime.io/advisories/CVE-2025-49180/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 15:00:18 GMTCVECVE-2025-49179: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionhttps://agentprime.io/advisories/CVE-2025-49179/https://agentprime.io/advisories/CVE-2025-49179/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 14:54:49 GMTCVE