Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

• CVE-2026-1709 Critical 9.4 Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 5.7%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13609 High 8.2 Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 0.5%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-12105 High 7.5 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-6020 High 7.8 Linux-pam: linux-pam directory traversal 0.5%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2023-52356 High 7.5 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service 2.5%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%