Red Hat Enterprise Linux 7

Vulnerabilities tagged with this 66

• Medium 5.5 Patch: filename validation bypass in reversal fallback allows file creation outside the working directory A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are... CVE-2026-115207 19:16
• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 05:56
• Medium 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application... CVE-2026-85518 04:42
• Medium 5.1 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by... CVE-2026-114038 Oct 21, 10:17
• High 7.3 Ghostscriptで細工されたPostScriptファイルにより保護回避とコマンド実行のおそれ 細工されたPostScriptファイルを処理すると、-dSAFER の制限を回避され、許可されていないパスのファイルにアクセスされたりコマンドを実行されたりするおそれがあります。影響を受けるのはRed Hat Enterprise Linux 8に含まれるGhostscriptです。修正版の情報は現時点では確認できていないため、最新の情報を確認してください。 CVE-2026-112177 Oct 20, 17:16
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112261). Successful exploitation can lead to full system takeover. CVE-2026-112261 Oct 20, 07:17
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112258). Successful exploitation can lead to full system takeover. CVE-2026-112258 Oct 20, 07:17
• High 7.8 Vulnerability in GIMP CVE-2026-112257 Oct 20, 07:17
• High 7.1 Out-of-Bounds Read in GIMP Vulnerability in GIMP (CVE-2026-112260). Confidential information can be exposed externally. CVE-2026-112260 Oct 20, 05:17
• Medium 5.5 Vulnerability in GIMP CVE-2026-112259 Oct 20, 04:17
• Medium 6.6 Vulnerability in Nautilus CVE-2026-111802 Oct 17, 09:31
• High 7.0 Vulnerability in GIMP CVE-2026-62439 Oct 17, 07:17
• High 7.5 Out-of-Bounds Write in spice-server CVE-2026-105958 Oct 17, 00:38
• High 7.5 Vulnerability in spice-server CVE-2026-105959 Oct 16, 21:31
• High 7.8 Vulnerability in cifs-utils CVE-2026-104715 Oct 16, 18:30
• High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889 Sep 24, 05:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• Medium 5.3 Vulnerability in Fetchmail CVE-2026-94184 Sep 22, 00:17
• High 8.1 Authorization Flaw in pki-core Vulnerability in pki-core (CVE-2026-80110). Confidential information can be exposed externally. Exploitable via POST /v2/profiles/raw. CVE-2026-80110 Sep 22, 00:17
• High 7.0 Vulnerability in gvfs CVE-2026-88924 Sep 11, 00:17
• Low 3.0 Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler… Vulnerability reported (CVE-2026-87876). Risk of unauthorized operations or information disclosure. CVE-2026-87876 Sep 10, 02:17
• Medium 4.3 The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the… Vulnerability reported (CVE-2026-87875). Risk of unauthorized operations or information disclosure. CVE-2026-87875 Sep 10, 02:17
• High 7.5 Vulnerability in SSSD's IdP authentication provider CVE-2026-87853 Sep 10, 02:17
• High 7.2 OS Command Injection in Dogtag PKI CVE-2026-76561 Sep 8, 17:17
• Medium 6.5 An integer overflow was found in Corosync's handling of membership commit token messages. The... Vulnerability reported (CVE-2026-81666). Risk of unauthorized operations or information disclosure. CVE-2026-81666 Sep 4, 19:17
• High 7.6 Use-After-Free in libsoup Vulnerability in libsoup (CVE-2026-85197). Risk of unauthorized operations or information disclosure. CVE-2026-85197 Sep 4, 17:17
• High 7.0 The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory… Vulnerability reported (CVE-2026-78409). Successful exploitation can lead to full system takeover. CVE-2026-78409 Sep 3, 01:17
• High 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across… Vulnerability reported (CVE-2026-78408). Data can be tampered with by attackers. CVE-2026-78408 Sep 3, 01:17
• High 7.8 Vulnerability in util-linux CVE-2026-78410 Sep 3, 01:17
• Medium 5.5 Vulnerability in libsolv CVE-2026-82327 Aug 29, 01:18