Red Hat Enterprise Linux 8

Vulnerabilities tagged with this 79

• Medium 5.5 A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the... CVE-2026-115207 19:16
• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 05:56
• Medium 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application... CVE-2026-85518 04:42
• Low 3.7 A flaw was found in the PathResourceManager component of the Undertow web server. This component... CVE-2026-114370 00:02
• Medium 6.2 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop... CVE-2026-92824 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML... CVE-2026-92823 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into... CVE-2026-92822 Oct 21, 13:18
• Medium 5.1 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by... CVE-2026-114038 Oct 21, 10:17
• High 7.3 Ghostscriptで細工されたPostScriptファイルにより保護回避とコマンド実行のおそれ 細工されたPostScriptファイルを処理すると、-dSAFER の制限を回避され、許可されていないパスのファイルにアクセスされたりコマンドを実行されたりするおそれがあります。影響を受けるのはRed Hat Enterprise Linux 8に含まれるGhostscriptです。修正版の情報は現時点では確認できていないため、最新の情報を確認してください。 CVE-2026-112177 Oct 20, 17:16
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112261). Successful exploitation can lead to full system takeover. CVE-2026-112261 Oct 20, 07:17
• High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112258). Successful exploitation can lead to full system takeover. CVE-2026-112258 Oct 20, 07:17
• High 7.8 Vulnerability in GIMP CVE-2026-112257 Oct 20, 07:17
• High 7.1 Out-of-Bounds Read in GIMP Vulnerability in GIMP (CVE-2026-112260). Confidential information can be exposed externally. CVE-2026-112260 Oct 20, 05:17
• Medium 5.5 Vulnerability in GIMP CVE-2026-112259 Oct 20, 04:17
• High 7.4 Vulnerability in bootc and ostree CVE-2026-16460 Oct 19, 16:16
• Medium 6.6 Vulnerability in Nautilus CVE-2026-111802 Oct 17, 09:31
• High 7.0 Vulnerability in GIMP CVE-2026-62439 Oct 17, 07:17
• High 7.5 Out-of-Bounds Write in spice-server CVE-2026-105958 Oct 17, 00:38
• High 7.5 Vulnerability in spice-server CVE-2026-105959 Oct 16, 21:31
• High 7.8 Vulnerability in cifs-utils CVE-2026-104715 Oct 16, 18:30
• High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889 Sep 24, 05:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• Medium 5.3 Vulnerability in Fetchmail CVE-2026-94184 Sep 22, 00:17
• High 8.1 Authorization Flaw in pki-core Vulnerability in pki-core (CVE-2026-80110). Confidential information can be exposed externally. Exploitable via POST /v2/profiles/raw. CVE-2026-80110 Sep 22, 00:17
• High 7.1 In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and... Vulnerability reported (CVE-2026-92925). Risk of unauthorized operations or information disclosure. CVE-2026-92925 Sep 17, 21:18
• High 7.8 Code Injection in flatpak-builder CVE-2026-86320 Sep 17, 17:17
• High 7.0 Vulnerability in gvfs CVE-2026-88924 Sep 11, 00:17
• Medium 4.3 The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the… Vulnerability reported (CVE-2026-87875). Risk of unauthorized operations or information disclosure. CVE-2026-87875 Sep 10, 02:17
• Low 3.0 Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler… Vulnerability reported (CVE-2026-87876). Risk of unauthorized operations or information disclosure. CVE-2026-87876 Sep 10, 02:17
• High 7.5 Vulnerability in SSSD's IdP authentication provider CVE-2026-87853 Sep 10, 02:17