Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-8445 Medium 5.7 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) 0.4%
• CVE-2024-5953 Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service 0.6%
• CVE-2024-5564 High 8.1 Libndp: buffer overflow in route information length field 1.2%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%