Red Hat Red Hat Enterprise Linux 8

• CVE-2026-78701 Medium 6.5 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos 0.8%
• CVE-2026-78322 Medium 6.5 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers 0.5%
• CVE-2026-78475 Medium 6.1 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader 0.3%
• CVE-2026-78465 High 7.0 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit 0.3%
• CVE-2026-19685 High 7.1 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) 0.2%
• CVE-2026-78367 High 7.0 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection 0.2%
• CVE-2026-78376 High 8.8 Webkitgtk: use-after-free of jscvalue function parameters 0.5%
• CVE-2026-78323 Medium 6.5 Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates 0.2%
• CVE-2026-73199 Medium 6.5 Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value 0.4%
• CVE-2026-11861 Critical 9.6 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships 0.4%
• CVE-2026-73198 High 7.5 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read 0.5%
• CVE-2026-13097 High 8.7 Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore 0.8%
• CVE-2026-73196 Medium 4.3 Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding 0.4%
• CVE-2026-73197 High 7.5 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read 0.6%
• CVE-2026-18917 High 7.8 Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 0.2%
• CVE-2026-77014 Medium 5.3 Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses 0.2%
• CVE-2026-43961 High 7.8 Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution 0.2%
• CVE-2026-76235 High 7.5 Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html 0.6%
• CVE-2026-75900 Medium 6.1 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch 0.1%
• CVE-2026-75032 Medium 6.3 Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder 0.2%
• CVE-2026-19879 Medium 5.3 Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 0.4%
• CVE-2026-58224 Medium 6.5 Samba: ctdb fails to do integrity checking of received packets 0.3%
• CVE-2026-19617 Medium 5.5 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser 0.2%
• CVE-2026-19730 Medium 4.2 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives 0.1%
• CVE-2026-73584 Medium 6.3 Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling 0.1%
• CVE-2026-73583 Medium 6.6 Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr 0.1%
• CVE-2026-73585 Medium 6.3 Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack 0.1%
• CVE-2026-19654 High 7.5 Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd 0.8%
• CVE-2026-73433 Medium 6.6 Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write 0.1%
• CVE-2026-73434 Medium 6.1 Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing 0.1%
• CVE-2026-19548 Medium 5.5 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing 0.2%
• CVE-2026-18663 Medium 5.9 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control 0.5%
• CVE-2026-19550 High 8.2 Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 0.5%
• CVE-2026-19546 High 8.8 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute 0.4%
• CVE-2026-71218 Medium 5.3 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion 0.4%
• CVE-2026-71217 High 7.5 Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion 0.6%
• CVE-2026-72693 High 7.8 Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login 0.1%
• CVE-2026-72694 High 7.1 Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation 0.1%
• CVE-2026-6426 Medium 4.4 Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access 0.4%
• CVE-2026-19411 Low 3.9 Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null 0.1%
• CVE-2026-63622 High 7.8 Libvirt: swtpm privilege escalation via symlink following 0.1%
• CVE-2026-59091 High 7.3 Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file 0.4%
• CVE-2026-63623 Medium 5.5 Libvirt: information disclosure via world-readable storage volume images during clone/convert <0.1%
• CVE-2026-59090 High 8.4 Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow 0.6%
• CVE-2026-59088 Medium 5.5 Gimp: gimp: denial of service via signed integer overflow in fli file processing 0.3%
• CVE-2026-59087 High 7.8 Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation 0.5%
• CVE-2026-19404 Medium 6.5 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance 0.4%
• CVE-2026-19389 High 7.1 Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read 0.4%
• CVE-2026-19387 High 7.6 Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder 0.4%
• CVE-2026-42170 High 7.8 Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c) 0.2%