Red Hat Enterprise Linux 9
Related 80slug: red-hat-enterprise-linux-9
No explanation yet for this tag.
Vulnerabilities tagged with this 85
- High 7.4 Goose ターミナル連携でシェル履歴の機密情報がLLMへ送信される Goose のターミナル連携機能を有効にすると、シェルのコマンド履歴がマスキングされないまま、設定された LLM プロバイダーのエンドポイントに送信されるおそれがあります。ターミナルに入力された API トークンやパスワードなどの機密情報が外部へ漏えいする可能性があり、深刻度は High、CVSS v3 は 7.4 です。修正版の情報は確認できていないため、最新の情報を確認してください。 CVE-2026-111079
- Medium 5.5 A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the... CVE-2026-115207
- Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406
- Medium 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application... CVE-2026-85518
- Low 3.7 A flaw was found in the PathResourceManager component of the Undertow web server. This component... CVE-2026-114370
- Low 3.3 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or... CVE-2026-114236
- Medium 6.2 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop... CVE-2026-92824
- Medium 6.2 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML... CVE-2026-92823
- Medium 6.2 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into... CVE-2026-92822
- Medium 5.1 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by... CVE-2026-114038
- Medium 5.0 A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console... CVE-2026-113496
- Medium 5.0 A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication... CVE-2026-113495
- High 7.3 Ghostscriptで細工されたPostScriptファイルにより保護回避とコマンド実行のおそれ 細工されたPostScriptファイルを処理すると、-dSAFER の制限を回避され、許可されていないパスのファイルにアクセスされたりコマンドを実行されたりするおそれがあります。影響を受けるのはRed Hat Enterprise Linux 8に含まれるGhostscriptです。修正版の情報は現時点では確認できていないため、最新の情報を確認してください。 CVE-2026-112177
- High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112258). Successful exploitation can lead to full system takeover. CVE-2026-112258
- High 7.8 Vulnerability in GIMP CVE-2026-112257
- High 7.8 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2026-112261). Successful exploitation can lead to full system takeover. CVE-2026-112261
- High 7.1 Out-of-Bounds Read in GIMP Vulnerability in GIMP (CVE-2026-112260). Confidential information can be exposed externally. CVE-2026-112260
- Medium 5.5 Vulnerability in GIMP CVE-2026-112259
- High 7.4 Vulnerability in bootc and ostree CVE-2026-16460
- Medium 6.6 Vulnerability in Nautilus CVE-2026-111802
- High 7.0 Vulnerability in GIMP CVE-2026-62439
- High 7.8 Vulnerability in cifs-utils CVE-2026-104715
- High 9.5 Use-After-Free in librsvg Vulnerability in librsvg (CVE-2026-96889). Successful exploitation can lead to full system takeover. CVE-2026-96889
- High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512
- Medium 5.3 Vulnerability in Fetchmail CVE-2026-94184
- High 8.1 Authorization Flaw in pki-core Vulnerability in pki-core (CVE-2026-80110). Confidential information can be exposed externally. Exploitable via POST /v2/profiles/raw. CVE-2026-80110
- Medium 5.5 Vulnerability in cockpit-machines CVE-2026-92768
- Medium 5.0 Vulnerability in cockpit-machines CVE-2026-92747
- Medium 5.0 Vulnerability in cockpit-machines CVE-2026-92745
- High 7.1 In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and... Vulnerability reported (CVE-2026-92925). Risk of unauthorized operations or information disclosure. CVE-2026-92925