Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

• CVE-2025-49180 High 7.8 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension 0.3%
• CVE-2025-49179 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension 0.3%
• CVE-2025-49178 Medium 5.5 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 0.2%
• CVE-2025-49176 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension 0.4%
• CVE-2025-49175 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors 0.3%
• CVE-2025-4404 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 2.0%
• CVE-2025-6020 High 7.8 Linux-pam: linux-pam directory traversal 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-48798 High 7.3 Gimp: multiple use after free in xcf parser 0.2%
• CVE-2025-48797 High 7.3 Gimp: multiple heap buffer overflows in tga parser 0.3%
• CVE-2025-5024 High 7.4 Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus 0.8%
• CVE-2025-4373 Medium 4.8 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 0.6%
• CVE-2025-3891 High 7.5 Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 1.6%
• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 1.4%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%