Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-34002 Medium 6.1 Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 0.5%
• CVE-2026-34000 Medium 6.1 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. 0.5%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%
• CVE-2026-34003 High 7.8 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 0.2%
• CVE-2026-34001 High 7.8 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 0.3%
• CVE-2026-33999 High 7.8 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 0.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-5119 Medium 5.9 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 0.3%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-5372 Medium 5.0 Libssh: incorrect return code handling in ssh_kdf() in libssh 0.5%
• CVE-2025-49180 High 7.8 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension 0.3%
• CVE-2025-49179 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension 0.3%
• CVE-2025-49178 Medium 5.5 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 0.2%
• CVE-2025-49176 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension 0.4%
• CVE-2025-49175 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors 0.3%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%