Skip to contentRedhat Enterprise Linux vulnerabilities
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via signed integer overflow in fli file processingCVE-2026-59088Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocationCVE-2026-59087Fix available7.8 High
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout returnCVE-2026-71227Fix available5.1 Medium
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 moreLibkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio pathCVE-2026-71226Fix available7.3 High
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundariesCVE-2026-71225Fix available6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1CVE-2026-68743Fix available5.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder uninitialized heap disclosure in initgroups replyCVE-2026-68744Fix available3.3 Low
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +6 more +8 moreGimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)CVE-2026-42169Fix available7.3 High
- gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 moreTar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escapeCVE-2026-18477Fix available4.4 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked accountCVE-2026-186515.4 Medium
- gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 moreTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteCVE-2026-18508Fix available4.4 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddrCVE-2026-68742Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: remote code execution via crafted paa fileCVE-2026-6695Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp file-png plugin: denial of service via oversized apng trns chunkCVE-2026-6694Fix available5.5 Medium
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkCVE-2026-117707.5 High
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsingCVE-2026-15722Fix available7.5 High
- samba, red hat ceph storage 9.2, enterprise linux 10 +7 more +9 moreSamba: ctdb fails to do integrity checking of received packetsCVE-2026-58224Fix available6.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesCVE-2026-66759Fix available7.1 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi imagesCVE-2026-66757Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesCVE-2026-66758Fix available7.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()CVE-2026-66338Fix available5.4 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()CVE-2026-663376.5 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnelsCVE-2026-66339Fix available6.5 Medium
- gnome libsoup, red hat enterprise linux 10, redhat enterprise linux +2 moreLibsoup: heap out-of-bounds read in libsoup due to integer truncationCVE-2026-12548Fix available4.2 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: authentication bypass via missing gssapi principal checkCVE-2026-59851Fix available8.8 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: use-after-free via data callbacks on closed channelsCVE-2026-59850Fix available4.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: denial of service via automatic certificate authentication loopCVE-2026-59849Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via sftp responses with unknown request idsCVE-2026-59848Fix available5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: integrity downgrade via openssl aes-gcm tag verificationCVE-2026-59847Fix available5.9 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: information disclosure via proxycommand %r username expansionCVE-2026-59846Fix available3.9 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via oversized sftp read lengthCVE-2026-59844Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via unchecked proxycommand fork() failureCVE-2026-59845Fix available5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via zero advertised channel packet sizeCVE-2026-59843Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: information disclosure via short gssapi curve25519 public keyCVE-2026-59842Fix available3.7 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: stack buffer overflow in sftp server longname constructionCVE-2026-15370Fix available6.7 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verificationCVE-2026-150413.7 Low
- red hat directory server 11, directory server 12, directory server 13 +8 more +10 more389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionCVE-2026-149694.4 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnCVE-2026-149405.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: integer overflow in read_rle_channel()CVE-2026-58384Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loaderCVE-2026-59089Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: stack buffer overflow in pnmscanner_gettoken()CVE-2026-58380Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreGimp: gimp: heap buffer overflow in read_channel_data()CVE-2026-58379Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: double-free in read_layer_block()CVE-2026-58381Fix available6.1 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- Show moreLoading…