Red Hat Enterprise Linux 96 Extended Update Support

Vulnerabilities related to Red Hat Enterprise Linux 96 Extended Update Support 165

• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 Oct 22, 05:56
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102560). Risk of unauthorized operations or information disclosure. CVE-2026-102560 Sep 30, 03:17
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102559). Risk of unauthorized operations or information disclosure. CVE-2026-102559 Sep 30, 03:17
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102558). Risk of unauthorized operations or information disclosure. CVE-2026-102558 Sep 30, 03:17
• High 8.6 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2026-102557). Risk of unauthorized operations or information disclosure. CVE-2026-102557 Sep 30, 02:17
• High 8.6 Vulnerability in libsoup CVE-2026-102556 Sep 30, 02:17
• High 7.1 A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a… Vulnerability reported (CVE-2026-97024). Risk of unauthorized operations or information disclosure. CVE-2026-97024 Sep 29, 13:18
• High 7.1 A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a… Vulnerability reported (CVE-2026-97023). Risk of unauthorized operations or information disclosure. CVE-2026-97023 Sep 29, 04:16
• High 7.5 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize… Vulnerability reported (CVE-2026-96280). Successful exploitation can lead to full system takeover. CVE-2026-96280 Sep 28, 06:17
• High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889 Sep 24, 05:17
• High 8.8 A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host… Path traversal reported (CVE-2026-96275). Successful exploitation can lead to full system takeover. CVE-2026-96275 Sep 24, 00:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• High 8.1 Authorization Flaw in pki-core Vulnerability in pki-core (CVE-2026-80110). Confidential information can be exposed externally. Exploitable via POST /v2/profiles/raw. CVE-2026-80110 Sep 22, 00:17
• High 7.5 Vulnerability in RESTEasy's IIOImageProvider CVE-2026-89059 Sep 18, 17:17
• High 7.4 Vulnerability in RESTEasy's CorsFilter CVE-2026-89058 Sep 18, 17:17
• High 7.1 In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and... Vulnerability reported (CVE-2026-92925). Risk of unauthorized operations or information disclosure. CVE-2026-92925 Sep 17, 21:18
• High 7.8 Code Injection in flatpak-builder CVE-2026-86320 Sep 17, 17:17
• High 7.3 A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 ... Vulnerability reported (CVE-2026-75092). Successful exploitation can lead to full system takeover. CVE-2026-75092 Sep 15, 18:16
• High 7.0 Vulnerability in gvfs CVE-2026-88924 Sep 11, 00:17
• High 8.1 Cross-Site Scripting (XSS) in FreeIPA Cross-site scripting in FreeIPA (CVE-2026-18147). Confidential information can be exposed externally. CVE-2026-18147 Sep 10, 02:17
• High 8.8 Vulnerability in bubblewrap CVE-2026-87766 Sep 9, 18:17
• High 8.5 A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this... Vulnerability reported (CVE-2026-74860). Successful exploitation can lead to full system takeover. CVE-2026-74860 Sep 8, 21:16
• High 7.2 OS Command Injection in Dogtag PKI CVE-2026-76561 Sep 8, 17:17
• High 7.5 Vulnerability in 389 Directory Server CVE-2026-18453 Sep 8, 00:17
• High 7.5 A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)... Vulnerability reported (CVE-2026-18355). Successful exploitation can lead to full system takeover. CVE-2026-18355 Sep 8, 00:17
• High 7.5 Authorization Flaw in 389 Directory Server Vulnerability in 389 Directory Server (CVE-2026-76560). Data can be tampered with by attackers. CVE-2026-76560 Sep 7, 23:16
• High 8.1 Vulnerability in FreeIPA's idp-add command CVE-2026-79678 Sep 7, 22:20
• Critical 9.8 Vulnerability in FreeIPA CVE-2026-76578 Sep 7, 22:20
• High 7.5 A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message... Vulnerability reported (CVE-2026-81665). Successful exploitation can lead to full system takeover. CVE-2026-81665 Sep 4, 18:17
• High 8.8 Vulnerability in gvfs CVE-2026-84268 Sep 2, 01:17