Red Hat Red Hat Enterprise Linux 6

• CVE-2026-40917 Medium 5.0 Gimp: gimp: application crashes or information disclosure via crafted icns image files 0.2%
• CVE-2026-40916 Medium 5.0 Gimp: gimp: denial of service due to stack buffer overflow in tim image loader 0.2%
• CVE-2026-40915 Medium 5.5 Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader 0.4%
• CVE-2026-6245 Medium 5.5 Sssd: out-of-bounds read in the sssd 0.1%
• CVE-2026-1584 High 7.5 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 1.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2025-14821 High 7.8 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows 0.1%
• CVE-2026-5745 Medium 5.5 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 0.2%
• CVE-2026-5704 Medium 5.0 Tar: tar: hidden file injection via crafted archives 0.4%
• CVE-2026-5673 Medium 5.6 Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing 0.2%
• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-5119 Medium 5.9 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 0.3%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-2272 Medium 4.3 Gimp: gimp: memory corruption due to integer overflow in ico file handling 0.9%
• CVE-2026-2271 Low 3.3 Gimp: gimp: denial of service via crafted psp image file 0.5%
• CVE-2026-2436 Medium 6.5 Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 0.5%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-4887 Medium 6.1 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image 0.6%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-1940 Medium 5.1 Gstreamer: incomplete fix of cve-2026-1940 0.2%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-2369 Medium 6.5 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 0.4%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-4271 Medium 5.3 Libsoup: libsoup: denial of service via use-after-free in http/2 server 0.9%
• CVE-2026-3633 Low 3.9 Libsoup: libsoup: header and http request injection via crlf injection 0.2%
• CVE-2026-3632 Low 3.9 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames 0.2%
• CVE-2026-3634 Low 3.9 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header 0.2%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-3099 Medium 5.8 Libsoup: libsoup: authentication bypass via digest authentication replay attack 0.4%
• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2026-28295 Medium 4.3 Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses 0.2%
• CVE-2026-28296 Medium 4.3 Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths 0.4%
• CVE-2026-26104 Medium 5.5 Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api <0.1%
• CVE-2026-26103 High 7.1 Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api <0.1%
• CVE-2025-14905 High 7.2 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 1.3%
• CVE-2026-2243 Medium 5.1 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 0.1%
• CVE-2026-0665 Medium 6.5 Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq 0.2%
• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-14876 Medium 5.5 Qemu-kvm: unbounded allocation in virtio-crypto 0.2%
• CVE-2025-1272 High 7.7 Kernel: secure boot does not automatically enable kernel lockdown 0.3%
• CVE-2025-0577 Medium 4.8 Glibc: vdso getrandom acceleration may return predictable randomness 0.2%
• CVE-2026-2443 Medium 5.3 Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 0.5%