Red Hat Enterprise Linux vulnerabilities

• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more Libstdc++: overflow leaves streambuf in inconsistent state on i/o error. CVE-2026-125709 4.2 MediumNovember 10, 2026
• gstreamer gst-plugins-bad, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table CVE-2026-125707 6.1 MediumNovember 10, 2026
• gstreamer gst-plugins-bad, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing CVE-2026-125706 5.5 MediumNovember 10, 2026
• gstreamer gst-plugins-base, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing CVE-2026-125712 8.2 HighNovember 10, 2026
• gstreamer gst-plugins-bad, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling CVE-2026-125703 5.5 MediumNovember 10, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option CVE-2026-125672 6.6 MediumNovember 10, 2026
• gstreamer, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization CVE-2026-125704 7.5 HighNovember 10, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service CVE-2026-122056 5.9 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries CVE-2026-112314 Fix available 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths CVE-2026-112321 Fix available 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching CVE-2026-112320 Fix available 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation CVE-2026-112319 Fix available 6.5 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers CVE-2026-112318 Fix available 6.5 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure CVE-2026-112316 Fix available 6.5 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path CVE-2026-112317 Fix available 5.3 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failure CVE-2026-112315 Fix available 5.3 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding CVE-2026-119079 Fix available 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests CVE-2026-112323 Fix available 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup CVE-2026-112322 Fix available 7.5 HighNovember 9, 2026
• gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Gst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layout CVE-2026-125041 Fix available 5.5 MediumNovember 9, 2026
• gstreamer gst-plugins-base, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service CVE-2026-125040 Fix available 6.5 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loop CVE-2026-121611 6.5 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice index CVE-2026-121601 6.1 MediumNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflow CVE-2026-119610 8.2 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handling CVE-2026-121629 7.5 HighNovember 9, 2026
• red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation CVE-2026-123876 4.4 MediumNovember 6, 2026
• red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +16 more +18 more Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rce CVE-2026-84503 6.7 MediumNovember 6, 2026
• red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 more Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) CVE-2026-123037 6.7 MediumNovember 6, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus CVE-2026-120749 6.2 MediumNovember 6, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail CVE-2026-123151 7.5 HighNovember 5, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch CVE-2026-121997 8.1 HighNovember 5, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length CVE-2026-121996 8.2 HighNovember 5, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail CVE-2026-121995 7.5 HighNovember 5, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length CVE-2026-121994 8.8 HighNovember 5, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator CVE-2026-121259 Fix available 6.5 MediumNovember 3, 2026
• gstreamer gst-plugins-good, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags CVE-2026-119843 Fix available 6.5 MediumNovember 3, 2026
• red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 more Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service CVE-2026-120831 6.5 MediumNovember 3, 2026
• red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 more Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure CVE-2026-120830 7.4 HighNovember 3, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Hivex: hivex: denial of service via out-of-bounds read in big-data block processing CVE-2026-120740 Fix available 2.0 LowNovember 2, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 more Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step CVE-2026-120194 7.5 HighOctober 31, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check CVE-2026-119842 Fix available 6.5 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation CVE-2026-119727 Fix available 6.5 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service CVE-2026-119729 Fix available 6.5 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure CVE-2026-119728 Fix available 6.5 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser CVE-2026-119777 Fix available 8.8 HighOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gimp: gimp: stack buffer overflow in psd image resource header loader CVE-2026-119528 Fix available 7.8 HighOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Gcc: out-of-bounds read in std::from_chars CVE-2026-115456 3.7 LowOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more Gcc: stack overflow in std::bitset on libstdc++ CVE-2026-115455 6.5 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Gcc: integer wrap in `std CVE-2026-114691 5.9 MediumOctober 30, 2026
• red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std CVE-2026-114690 6.2 MediumOctober 30, 2026
• Show olderLoading…