Rhel Tus (Redhat) - vulnerabilities (CVEs)

416 CVEs, 1 in the last 30 days, 23 known versions, newest CVE from 2026-10-21. Vendor: Redhat.

CVEs of Rhel Tus

CVE-2026-114406 - CVSS 6.8 (medium), 2026-10-21: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of…
CVE-2026-96512 - CVSS 7.8 (high), 2026-09-23: A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone…
CVE-2026-86320 - CVSS 7.8 (high), 2026-09-17: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a…
CVE-2026-18147 - CVSS 8.1 (high), 2026-09-09: A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI…
CVE-2026-87766 - CVSS 8.8 (high), 2026-09-09: A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot,…
CVE-2026-18922 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed…
CVE-2026-18453 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote…
CVE-2026-18355 - CVSS 7.5 (high), 2026-09-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read…
CVE-2026-76560 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty…
CVE-2026-79678 - CVSS 8.1 (high), 2026-09-07: A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the…
CVE-2026-76578 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the…
CVE-2026-81665 - CVSS 7.5 (high), 2026-09-04: A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the…
CVE-2026-84268 - CVSS 8.8 (high), 2026-09-01: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length…
CVE-2026-78002 - CVSS 7.5 (high), 2026-08-27: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending…
CVE-2026-11861 - CVSS 9.6 (critical), 2026-08-20: A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication…
CVE-2026-73198 - CVSS 7.5 (high), 2026-08-20: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily…
CVE-2026-13097 - CVSS 8.7 (high), 2026-08-20: A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does…
CVE-2026-73197 - CVSS 7.5 (high), 2026-08-20: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the…
CVE-2026-18917 - CVSS 7.8 (high), 2026-08-20: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows…
CVE-2026-19654 - CVSS 7.5 (high), 2026-08-12: A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery…
CVE-2026-73433 - CVSS 6.6 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a…
CVE-2026-73434 - CVSS 6.1 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries…
CVE-2026-19550 - CVSS 8.2 (high), 2026-08-11: A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration…
CVE-2026-63622 - CVSS 7.8 (high), 2026-08-10: A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in…
CVE-2026-19387 - CVSS 7.6 (high), 2026-08-10: A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient…
CVE-2026-15816 - CVSS 7.5 (high), 2026-08-07: A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without…
CVE-2026-18649 - CVSS 7.5 (high), 2026-08-06: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on…
CVE-2026-11770 - CVSS 7.5 (high), 2026-07-31: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check…
CVE-2026-15722 - CVSS 7.5 (high), 2026-07-31: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters…
CVE-2026-16529 - CVSS 7.5 (high), 2026-07-30: A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This…
CVE-2026-16527 - CVSS 7.3 (high), 2026-07-30: An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to…
CVE-2026-16526 - CVSS 8.8 (high), 2026-07-30: A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate…
CVE-2026-16524 - CVSS 7.8 (high), 2026-07-30: A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation…
CVE-2026-16313 - CVSS 7.6 (high), 2026-07-28: A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control…
CVE-2026-16445 - CVSS 7.5 (high), 2026-07-21: A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-15711 - CVSS 7.5 (high), 2026-07-14: A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which…
CVE-2026-15709 - CVSS 7.5 (high), 2026-07-14: A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes…
CVE-2026-59692 - CVSS 7.5 (high), 2026-07-09: A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is…
CVE-2026-59691 - CVSS 7.1 (high), 2026-07-09: A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp…
CVE-2026-11610 - CVSS 8.8 (high), 2026-07-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF…
CVE-2026-14476 - CVSS 8 (high), 2026-07-07: A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath…
CVE-2026-14474 - CVSS 8.8 (high), 2026-07-07: A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory…
CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-12912 - CVSS 7.3 (high), 2026-06-29: A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue…
CVE-2026-13601 - CVSS 7.1 (high), 2026-06-29: A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can…
CVE-2026-53196 - CVSS 6.8 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads…
CVE-2026-2050 - CVSS 7.8 (high), 2026-06-24: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2026-53059 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable…
CVE-2026-53016 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an…
CVE-2026-53006 - CVSS 9.8 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is…
CVE-2026-52923 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can…
CVE-2026-54513 - CVSS 8.1 (high), 2026-06-23: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and…
CVE-2026-56208 - CVSS 7.6 (high), 2026-06-19: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode…
CVE-2026-10649 - CVSS 8.6 (high), 2026-06-16: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process.…
CVE-2026-12329 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.
CVE-2026-12328 - CVSS 8.1 (high), 2026-06-16: Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed…
CVE-2026-12299 - CVSS 7.5 (high), 2026-06-16: JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152,…
CVE-2026-12298 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12289 - CVSS 8.8 (high), 2026-06-16: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird…
CVE-2026-12292 - CVSS 8.1 (high), 2026-06-16: Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…
CVE-2026-12296 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and…
CVE-2026-12291 - CVSS 8.8 (high), 2026-06-16: Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12295 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12290 - CVSS 8.1 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12294 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12297 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR…
CVE-2026-46331 - CVSS 7.8 (high), 2026-06-16: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes…
CVE-2026-42014 - CVSS 6.6 (medium), 2026-06-16: A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free…
CVE-2026-53705 - CVSS 7.6 (high), 2026-06-15: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer…
CVE-2026-52720 - CVSS 8.8 (high), 2026-06-15: A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than…
CVE-2026-52722 - CVSS 7.1 (high), 2026-06-15: A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer…
CVE-2026-8357 - CVSS 7.8 (high), 2026-06-15: LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening…
CVE-2026-54230 - CVSS 7.8 (high), 2026-06-13: A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell…
CVE-2026-54229 - CVSS 7 (high), 2026-06-13: A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls…
CVE-2026-54228 - CVSS 7.8 (high), 2026-06-13: A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and…
CVE-2026-54231 - CVSS 5.5 (medium), 2026-06-13: A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log…
CVE-2026-11774 - CVSS 7.6 (high), 2026-06-11: An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a…
CVE-2026-6893 - CVSS 7.5 (high), 2026-06-10: A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host…
CVE-2026-46529 - CVSS 8.4 (high), 2026-06-10: Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions…
CVE-2026-11837 - CVSS 7.3 (high), 2026-06-10: A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of…
CVE-2026-45447 - CVSS 8.8 (high), 2026-06-09: Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A…
CVE-2026-11788 - CVSS 7.5 (high), 2026-06-09: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an…
CVE-2025-10263 - CVSS 9.1 (critical), 2026-06-09: Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
CVE-2026-49975 - CVSS 7.5 (high), 2026-06-08: Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue…
CVE-2026-50264 - CVSS 7.8 (high), 2026-06-05: An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple…
CVE-2026-50260 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers…
CVE-2026-50263 - CVSS 5.5 (medium), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window…
CVE-2026-50259 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed…
CVE-2026-50262 - CVSS 5.5 (medium), 2026-06-05: An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a…
CVE-2026-50258 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel *…
CVE-2026-50261 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a…
CVE-2026-50257 - CVSS 7.8 (high), 2026-06-05: A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a…
CVE-2026-50256 - CVSS 7.8 (high), 2026-06-05: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name…