Red Hat Enterprise Linux 9.

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Sssd: out-of-bounds read in the sssd

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Race condition

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-427

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Tar: tar: hidden file injection via crafted archives

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Unrestricted file upload

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-289

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Code injection

Corosync: corosync: denial of service via integer overflow in join message validation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Corosync: corosync: denial of service and information disclosure via crafted udp packet

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-253

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-279

Libssh: libssh: denial of service via improper configuration file handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via inefficient regular expression processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Libssh: libssh: denial of service due to malformed sftp message

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: improper sanitation of paths received from scp servers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-170

Gimp: gimp: memory corruption due to integer overflow in ico file handling

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via crafted psp image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Polkit: polkit: denial of service via unbounded input processing through standard input

• Red Hat Enterprise Linux 10
• Red Hat Hardened Images
• Denial of service

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-193

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gstreamer: incomplete fix of cve-2026-1940

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: libarchive: denial of service via malformed iso file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-1335

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: denial of service via use-after-free in http/2 server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: header and http request injection via crlf injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1286

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Broken access control

Libsoup: libsoup: authentication bypass via digest authentication replay attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-323

Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Other injection

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-279

Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Server-side request forgery (SSRF)

Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Memory corruption

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-212

Qemu-kvm: unbounded allocation in virtio-crypto

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: secure boot does not automatically enable kernel lockdown

• Fedora Project Fedora Linux
• Red Hat Enterprise Linux 9
• Authentication bypass