Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-5024 High 7.4 Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus 0.8%
• CVE-2025-4945 Low 3.7 Libsoup: integer overflow in cookie expiration date handling in libsoup 0.7%
• CVE-2025-4373 Medium 4.8 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 0.6%
• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 1.4%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%