Red Hat Hardened Images.

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

• Red Hat Enterprise Linux 10.0 Extended Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-193

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

Libxml2: libxml2: denial of service via crafted xsd-validated document

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Efivar: efivar: denial of service due to stack overflow in device path node parsing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Denial of service

Binutils: binutils: denial of service via crafted elf file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-427

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Tar: tar: hidden file injection via crafted archives

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Unrestricted file upload

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-289

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Libssh: libssh: denial of service via improper configuration file handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via inefficient regular expression processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Libssh: libssh: denial of service due to malformed sftp message

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: improper sanitation of paths received from scp servers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Polkit: polkit: denial of service via unbounded input processing through standard input

• Red Hat Enterprise Linux 10
• Red Hat Hardened Images
• Denial of service

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libarchive: libarchive: denial of service via malformed iso file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-1335

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Broken access control

Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries

• Red Hat Hardened Images
• Red Hat Enterprise Linux 6
• Path traversal

Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization

• Red Hat Hardened Images
• Red Hat Enterprise Linux 6
• Path traversal

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Libxml2: memory leak leading to local denial of service in xmllint interactive shell

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libxml2: libxml2: denial of service via crafted xml catalogs

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: unbounded relaxng include recursion leading to stack overflow

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libtiff: libtiff write-what-where

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-123

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

• GNOME libxslt
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: vulnerability in gnutls certtool template parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gnutls: vulnerability in gnutls sct extension parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gnutls: vulnerability in gnutls othername san export

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libxml: null pointer dereference leads to denial of service (dos)

• GNOME libxml2
• Red Hat Enterprise Linux 10
• Memory corruption