Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-102559 High 8.6 Libsoup: libsoup: heap buffer overflow during websocket client-frame masking 0.6%
• CVE-2026-102558 High 8.6 Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth 0.6%
• CVE-2026-102557 High 8.6 Libsoup: libsoup: heap buffer overflow during websocket message reassembly 0.5%
• CVE-2026-102556 High 8.6 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion 0.5%
• CVE-2026-96889 High 7.8 Librsvg: use-after-free when xml includes have duplicated entities 0.6%
• CVE-2026-96512 High 7.8 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 0.3%
• CVE-2026-18147 High 8.1 Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url 0.6%
• CVE-2026-74860 High 8.5 Libxml2: double-free/uaf in libxml2 python bindings 0.7%
• CVE-2026-76561 High 7.2 Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 0.8%
• CVE-2026-18922 Critical 9.8 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property 0.6%
• CVE-2026-18453 High 7.5 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search 0.8%
• CVE-2026-18355 High 7.5 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() 0.8%
• CVE-2026-76560 High 7.5 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn 0.6%
• CVE-2026-76578 Critical 9.8 Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci 1.3%
• CVE-2026-81665 High 7.5 Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly 0.4%
• CVE-2026-84268 High 8.8 Gvfs: sftp: heap-based buffer overflow in read_reply() 0.6%
• CVE-2026-83596 High 8.8 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature 0.5%
• CVE-2026-78376 High 8.8 Webkitgtk: use-after-free of jscvalue function parameters 0.5%
• CVE-2026-11861 Critical 9.6 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships 0.4%
• CVE-2026-13097 High 8.7 Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore 0.8%
• CVE-2026-73197 High 7.5 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read 0.6%
• CVE-2026-18917 High 7.8 Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 0.2%
• CVE-2026-73433 Medium 6.6 Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write 0.1%
• CVE-2026-73434 Medium 6.1 Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing 0.1%
• CVE-2026-19550 High 8.2 Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 0.5%
• CVE-2026-63622 High 7.8 Libvirt: swtpm privilege escalation via symlink following 0.1%
• CVE-2026-19387 High 7.6 Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder 0.4%
• CVE-2026-15816 High 7.5 Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() 0.4%
• CVE-2026-18649 High 7.5 Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders 1.0%
• CVE-2026-11770 High 7.5 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check 0.5%
• CVE-2026-15722 High 7.5 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing 0.8%
• CVE-2026-16313 High 7.6 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export 0.3%
• CVE-2026-15588 Medium 5.3 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 0.5%
• CVE-2026-59692 High 7.5 Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback 0.6%
• CVE-2026-59691 High 7.1 Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer 0.3%
• CVE-2026-11610 High 8.8 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind 0.5%
• CVE-2026-14476 High 8.0 Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 0.7%
• CVE-2026-14474 High 8.8 Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 0.6%
• CVE-2026-58016 High 7.5 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 0.6%
• CVE-2026-58015 Medium 5.9 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive 0.8%
• CVE-2026-58014 High 7.3 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 0.6%
• CVE-2026-58013 Medium 6.5 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" 0.5%
• CVE-2026-58012 Medium 6.5 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() 0.5%
• CVE-2026-58011 Medium 6.5 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime 0.5%
• CVE-2026-58010 Medium 6.5 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() 0.5%
• CVE-2026-12912 High 7.3 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image 0.4%
• CVE-2026-13601 High 7.1 Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications 0.2%
• CVE-2026-56208 High 7.6 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 0.6%
• CVE-2026-10649 High 8.6 Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression 0.6%