Red Hat Enterprise Linux 86 Telecommunications Update Service

Vulnerabilities related to Red Hat Enterprise Linux 86 Telecommunications Update Service 86

• High 8.0 OS Command Injection in Cockpit CVE-2026-4802 May 11, 23:16
• High 7.8 Use-After-Free in java Vulnerability in java (CVE-2025-7425). Data can be tampered with by attackers. Mitigation: upgrade to 1.8.0, 8.0.481 or later. CVE-2025-7425 May 6, 23:45
• Medium 6.1 Vulnerability in X.Org X server CVE-2026-34002 May 6, 03:33
• Medium 6.1 Out-of-Bounds Read in X.Org X server Vulnerability in X.Org X server (CVE-2026-34000). Confidential information can be exposed externally. Exploitable via XkbAddGeomKeyAlias. CVE-2026-34000 May 6, 01:16
• High 7.8 A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could... Vulnerability reported (CVE-2026-34003). Successful exploitation can lead to full system takeover. CVE-2026-34003 Apr 24, 01:16
• High 7.8 Vulnerability in X.Org X server CVE-2026-34001 Apr 24, 01:16
• High 7.8 Vulnerability in X.Org X server CVE-2026-33999 Apr 24, 01:16
• High 7.5 Vulnerability in gdk-pixbuf library CVE-2026-5201 Mar 31, 18:16
• High 7.5 Vulnerability in libarchive CVE-2026-5121 Mar 30, 17:16
• Medium 6.1 Vulnerability in GIMP CVE-2026-4887 Mar 27, 00:30
• High 7.8 Vulnerability in libtiff library CVE-2026-4775 Mar 25, 00:16
• High 7.5 Out-of-Bounds Read in libarchive Vulnerability in libarchive (CVE-2026-4424). Confidential information can be exposed externally. CVE-2026-4424 Mar 20, 00:16
• High 7.2 Vulnerability in 389-ds-base server CVE-2025-14905 Feb 24, 01:29
• High 8.6 Vulnerability in libsoup CVE-2026-1761 Feb 3, 00:30
• Medium 6.5 Vulnerability in vsftpd CVE-2025-14242 Jan 15, 01:15
• High 8.6 Vulnerability in libsoup's NTLM (NT LAN Manager) authentication module CVE-2026-0719 Jan 9, 00:31
• High 8.2 A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for… Vulnerability reported (CVE-2025-14523). Data can be tampered with by attackers. Exploitable via Host header. CVE-2025-14523 Dec 11, 2025
• Medium 6.5 Vulnerability in glib CVE-2025-14512 Dec 11, 2025
• Medium 5.6 Vulnerability in GLib CVE-2025-14087 Dec 10, 2025
• High 8.8 Vulnerability in WebKitGTK CVE-2025-66287 Dec 5, 2025
• High 7.4 Vulnerability in WebKitGTK CVE-2025-13947 Dec 3, 2025
• High 7.7 Vulnerability in Codeready Linux Builder CVE-2025-13601 Nov 27, 2025
• High 7.5 Out-of-Bounds Read in WebKitGTK and WPE WebKit Vulnerability in WebKitGTK and WPE WebKit (CVE-2025-13502). Risk of unauthorized operations or information disclosure. CVE-2025-13502 Nov 25, 2025
• High 8.6 If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by… SSRF reported (CVE-2025-59088). Confidential information can be exposed externally. CVE-2025-59088 Nov 13, 2025
• High 7.3 Use-After-Free in Ibm Xorg Vulnerability in Ibm Xorg (CVE-2025-62230). Confidential information can be exposed externally. CVE-2025-62230 Oct 30, 2025
• High 7.3 Use-After-Free in X.Org X server and Xwayland Vulnerability in X.Org X server and Xwayland (CVE-2025-62229). Data can be tampered with by attackers. CVE-2025-62229 Oct 30, 2025
• High 7.3 Vulnerability in Ibm Xorg CVE-2025-62231 Oct 30, 2025
• High 8.8 A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux… Vulnerability reported (CVE-2025-11561). Successful exploitation can lead to full system takeover. CVE-2025-11561 Oct 9, 2025
• High 7.5 Out-of-Bounds Read in libsoup HTTP library Vulnerability in libsoup HTTP library (CVE-2025-11021). Confidential information can be exposed externally. CVE-2025-11021 Sep 26, 2025
• High 8.8 Vulnerability in Libtiff CVE-2025-9900 Sep 24, 2025