Skip to contentRed Hat Enterprise Linux 8 vulnerabilities
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processingCVE-2026-71222Fix available5.3 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemetaCVE-2026-71221Fix available7.0 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_editCVE-2026-71220Fix available7.0 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversalCVE-2026-71219Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate headerCVE-2026-85150Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +11 more +13 moreBubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setupCVE-2026-87766Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command injection in rpmuncompress via unescaped filenames passed to popen()CVE-2026-848387.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball pathCVE-2026-84837Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreUtil-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksCVE-2026-78409Fix available7.0 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 7 +5 more +7 moreUtil-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirectionCVE-2026-78410Fix available7.8 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 7 +5 more +7 moreUtil-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authorityCVE-2026-78408Fix available7.9 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.htmlCVE-2026-536834.3 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: mtp: out-of-bounds read in do_read()CVE-2026-84270Fix available4.3 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: afp: heap-based buffer overflow in dsi read pathCVE-2026-84269Fix available6.5 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: sftp: uninitialized heap disclosure in read_string()CVE-2026-84267Fix available4.3 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreGvfs: sftp: heap-based buffer overflow in read_reply()CVE-2026-84268Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenamesCVE-2026-84233Fix available7.0 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hostsCVE-2026-536825.3 Medium
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosureCVE-2026-118736.5 Medium
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureCVE-2026-83596Fix available8.8 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreGdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfCVE-2026-13732Fix available7.0 High
- red hat build of apache camel 3.33.3.sp1, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +14 more +16 moreResteasy-core: resteasy sourceprovider remote unauthenticated file readCVE-2026-17615Fix available7.5 High
- red hat build of apache camel for spring boot 4, enterprise linux 10, enterprise linux 8 +6 more +8 moreUndertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infiniteCVE-2026-816247.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handlingCVE-2026-82343Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds checkCVE-2026-82330Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette countCVE-2026-82328Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist dataCVE-2026-82327Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0CVE-2026-82324Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recoveryCVE-2026-81893Fix available4.7 Medium
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +13 more +15 moreUndertow-core: undertow: denial of service via websocket permessage-deflate processingCVE-2026-56807.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreRsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionCVE-2026-78002Fix available7.5 High
- red hat ceph storage 4, ceph storage 6, ceph storage 7 +8 more +10 moreLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthroughCVE-2026-18495Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlinkCVE-2026-77159Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: stack vla size underflow denial of service in seattleCVE-2026-79902Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: stack overflow in name2utf8 causes dos and potential code executionCVE-2026-80186Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as rootCVE-2026-80185Fix available5.7 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validationCVE-2026-80101Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreEmacs: emacs: command injection via crafted filenames in trampCVE-2026-79992Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreSos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file writeCVE-2026-79655Fix available7.8 High
- red hat directory server 11, directory server 12, directory server 13 +6 more +8 more389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dosCVE-2026-787016.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreFile-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlersCVE-2026-78322Fix available6.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loaderCVE-2026-78475Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bitCVE-2026-78465Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreNetworkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)CVE-2026-19685Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpmbuild gettarspec() crafted tar member name → macro injectionCVE-2026-78367Fix available7.0 High
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: use-after-free of jscvalue function parametersCVE-2026-78376Fix available8.8 High
- red hat certificate system 10, certificate system 11, enterprise linux 10 +4 more +6 moreJss: jss: jsstrustmanager does not verify nss trust flags on ca certificatesCVE-2026-78323Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request valueCVE-2026-731996.5 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipsCVE-2026-118619.6 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body readCVE-2026-731987.5 High
- Show moreLoading…