Red Hat Enterprise Linux 7 Extended Lifecycle Support

Vulnerabilities related to Red Hat Enterprise Linux 7 Extended Lifecycle Support 149

• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 Oct 22, 05:56
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102559). Risk of unauthorized operations or information disclosure. CVE-2026-102559 Sep 30, 03:17
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102558). Risk of unauthorized operations or information disclosure. CVE-2026-102558 Sep 30, 03:17
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102557). Risk of unauthorized operations or information disclosure. CVE-2026-102557 Sep 30, 02:17
• High 8.6 Vulnerability in libsoup CVE-2026-102556 Sep 30, 02:17
• High 7.5 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize… Vulnerability reported (CVE-2026-96280). Successful exploitation can lead to full system takeover. CVE-2026-96280 Sep 28, 06:17
• High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889 Sep 24, 05:17
• High 8.8 A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host… Path traversal reported (CVE-2026-96275). Successful exploitation can lead to full system takeover. CVE-2026-96275 Sep 24, 00:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• High 8.1 Cross-Site Scripting (XSS) in FreeIPA Cross-site scripting in FreeIPA (CVE-2026-18147). Confidential information can be exposed externally. CVE-2026-18147 Sep 10, 02:17
• High 8.5 A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this... Vulnerability reported (CVE-2026-74860). Successful exploitation can lead to full system takeover. CVE-2026-74860 Sep 8, 21:16
• High 7.2 OS Command Injection in Dogtag PKI CVE-2026-76561 Sep 8, 17:17
• High 7.5 Vulnerability in 389 Directory Server CVE-2026-18453 Sep 8, 00:17
• High 7.5 A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)... Vulnerability reported (CVE-2026-18355). Successful exploitation can lead to full system takeover. CVE-2026-18355 Sep 8, 00:17
• High 7.5 Authorization Flaw in 389 Directory Server Vulnerability in 389 Directory Server (CVE-2026-76560). Data can be tampered with by attackers. CVE-2026-76560 Sep 7, 23:16
• Critical 9.8 Vulnerability in FreeIPA CVE-2026-76578 Sep 7, 22:20
• High 7.5 A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message... Vulnerability reported (CVE-2026-81665). Successful exploitation can lead to full system takeover. CVE-2026-81665 Sep 4, 18:17
• High 8.8 Vulnerability in gvfs CVE-2026-84268 Sep 2, 01:17
• High 8.8 Vulnerability in WebKitGTK CVE-2026-83596 Sep 1, 06:17
• High 7.5 Vulnerability in rsyslog CVE-2026-78002 Aug 28, 02:20
• High 8.8 Use-After-Free in WebKitGTK Vulnerability in WebKitGTK (CVE-2026-78376). Successful exploitation can lead to full system takeover. CVE-2026-78376 Aug 25, 00:31
• High 7.5 Vulnerability in FreeIPA CVE-2026-73197 Aug 20, 20:16
• High 8.7 Vulnerability in Enterprise Linux CVE-2026-13097 Aug 20, 20:16
• Critical 9.6 Vulnerability in FreeIPA CVE-2026-11861 Aug 20, 20:16
• High 7.8 Vulnerability in libvirt CVE-2026-18917 Aug 20, 19:16
• High 8.2 Authorization Flaw in FreeIPA Vulnerability in FreeIPA (CVE-2026-19550). Confidential information can be exposed externally. CVE-2026-19550 Aug 12, 06:33
• High 7.8 Vulnerability in libvirt CVE-2026-63622 Aug 11, 06:32
• High 7.5 OS Command Injection in dracut CVE-2026-15816 Aug 7, 20:17
• High 7.5 Vulnerability in Directory Server CVE-2026-15722 Jul 31, 19:16
• High 7.5 Vulnerability in 389 Directory Server CVE-2026-11770 Jul 31, 19:16