Red Hat Enterprise Linux 10

Vulnerabilities tagged with this 83

• High 7.4 Goose: goose: shell history and environment leak via terminal integration A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data—such as API tokens, passw... CVE-2026-111079 19:18
• Medium 5.5 Patch: filename validation bypass in reversal fallback allows file creation outside the working directory A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are... CVE-2026-115207 19:16
• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 05:56
• Medium 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application... CVE-2026-85518 04:42
• Low 3.3 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or... CVE-2026-114236 Oct 21, 18:30
• Medium 6.2 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop... CVE-2026-92824 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML... CVE-2026-92823 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into... CVE-2026-92822 Oct 21, 13:18
• Medium 5.1 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by... CVE-2026-114038 Oct 21, 10:17
• Medium 5.0 A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console... CVE-2026-113496 Oct 20, 21:25
• Medium 5.0 A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication... CVE-2026-113495 Oct 20, 21:25
• High 7.3 Ghostscriptで細工されたPostScriptファイルにより保護回避とコマンド実行のおそれ 細工されたPostScriptファイルを処理すると、-dSAFER の制限を回避され、許可されていないパスのファイルにアクセスされたりコマンドを実行されたりするおそれがあります。影響を受けるのはRed Hat Enterprise Linux 8に含まれるGhostscriptです。修正版の情報は現時点では確認できていないため、最新の情報を確認してください。 CVE-2026-112177 Oct 20, 17:16
• High 7.8 Vulnerability in GIMP CVE-2026-112257 Oct 20, 07:17
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112258). Successful exploitation can lead to full system takeover. CVE-2026-112258 Oct 20, 07:17
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112261). Successful exploitation can lead to full system takeover. CVE-2026-112261 Oct 20, 07:17
• High 7.1 Out-of-Bounds Read in GIMP Vulnerability in GIMP (CVE-2026-112260). Confidential information can be exposed externally. CVE-2026-112260 Oct 20, 05:17
• Medium 5.5 Vulnerability in GIMP CVE-2026-112259 Oct 20, 04:17
• High 7.4 Vulnerability in bootc and ostree CVE-2026-16460 Oct 19, 16:16
• Medium 6.6 Vulnerability in Nautilus CVE-2026-111802 Oct 17, 09:31
• High 7.0 Vulnerability in GIMP CVE-2026-62439 Oct 17, 07:17
• High 7.8 Vulnerability in cifs-utils CVE-2026-104715 Oct 16, 18:30
• High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889 Sep 24, 05:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• Medium 5.3 Vulnerability in Fetchmail CVE-2026-94184 Sep 22, 00:17
• High 8.1 Authorization Flaw in pki-core Vulnerability in pki-core (CVE-2026-80110). Confidential information can be exposed externally. Exploitable via POST /v2/profiles/raw. CVE-2026-80110 Sep 22, 00:17
• Medium 5.5 Vulnerability in cockpit-machines CVE-2026-92768 Sep 19, 03:18
• Medium 5.0 Vulnerability in cockpit-machines CVE-2026-92747 Sep 19, 03:18
• Medium 5.0 Vulnerability in cockpit-machines CVE-2026-92745 Sep 19, 03:18
• High 7.1 In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and... Vulnerability reported (CVE-2026-92925). Risk of unauthorized operations or information disclosure. CVE-2026-92925 Sep 17, 21:18
• High 7.8 Code Injection in flatpak-builder CVE-2026-86320 Sep 17, 17:17