Red Hat Hardened Images

Vulnerabilities tagged with this 15

• Medium 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates... CVE-2026-114406 05:56
• Medium 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application... CVE-2026-85518 04:42
• Low 3.3 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or... CVE-2026-114236 Oct 21, 18:30
• Medium 6.2 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML... CVE-2026-92823 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop... CVE-2026-92824 Oct 21, 13:18
• Medium 6.2 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into... CVE-2026-92822 Oct 21, 13:18
• High 7.4 Vulnerability in bootc and ostree CVE-2026-16460 Oct 19, 16:16
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• High 7.1 In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and... Vulnerability reported (CVE-2026-92925). Risk of unauthorized operations or information disclosure. CVE-2026-92925 Sep 17, 21:18
• Medium 4.3 The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the… Vulnerability reported (CVE-2026-87875). Risk of unauthorized operations or information disclosure. CVE-2026-87875 Sep 10, 02:17
• Low 3.0 Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler… Vulnerability reported (CVE-2026-87876). Risk of unauthorized operations or information disclosure. CVE-2026-87876 Sep 10, 02:17
• High 7.9 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across… Vulnerability reported (CVE-2026-78408). Data can be tampered with by attackers. CVE-2026-78408 Sep 3, 01:17
• High 7.0 The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory… Vulnerability reported (CVE-2026-78409). Successful exploitation can lead to full system takeover. CVE-2026-78409 Sep 3, 01:17
• High 7.8 Vulnerability in util-linux CVE-2026-78410 Sep 3, 01:17
• Medium 5.5 Vulnerability in libsolv CVE-2026-82327 Aug 29, 01:18