Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

• CVE-2025-4948 High 7.5 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 1.1%
• CVE-2025-46421 Medium 6.8 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 0.6%
• CVE-2025-46420 Medium 6.5 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 0.6%
• CVE-2025-32911 Critical 9.0 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 1.0%
• CVE-2025-32914 High 7.4 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 0.8%
• CVE-2025-32907 Medium 5.3 Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 0.7%
• CVE-2025-32906 High 7.5 Libsoup: out of bounds reads in soup_headers_parse_request() 1.3%
• CVE-2025-32913 High 7.5 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 0.8%
• CVE-2025-32053 Medium 6.5 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 0.7%
• CVE-2025-32052 Medium 6.5 Libsoup: heap buffer overflow in sniff_unknown() 0.7%
• CVE-2025-32050 Medium 5.9 Libsoup: integer overflow in append_param_quoted 0.8%
• CVE-2025-32049 High 7.5 Libsoup: denial of service attack to websocket server 1.1%
• CVE-2025-3155 High 7.4 Yelp: arbitrary file read 13.1%
• CVE-2025-2784 High 7.0 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 0.9%
• CVE-2025-26601 High 7.8 Xorg: xwayland: use-after-free in syncinittrigger() 0.4%
• CVE-2025-26600 High 7.8 Xorg: xwayland: use-after-free in playreleasedevents() 0.4%
• CVE-2025-26599 High 7.8 Xorg: xwayland: use of uninitialized pointer in compredirectwindow() 0.4%
• CVE-2025-26598 High 7.8 Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() 0.4%
• CVE-2025-26597 High 7.8 Xorg: xwayland: buffer overflow in xkbchangetypesofkey() 0.4%
• CVE-2025-26596 High 7.8 Xorg: xwayland: heap overflow in xkbwritekeysyms() 0.4%
• CVE-2025-26595 High 7.8 Xorg: xwayland: buffer overflow in xkbvmodmasktext() 0.4%
• CVE-2025-26594 High 7.8 X.org: xwayland: use-after-free of the root cursor 0.4%
• CVE-2025-0624 High 7.6 Grub2: net: out-of-bounds write in grub_net_search_config_file() 1.4%
• CVE-2025-1244 High 8.8 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2.6%
• CVE-2024-11218 High 8.6 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 0.4%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2024-11614 High 7.4 Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library 0.6%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-45770 Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user 0.3%
• CVE-2024-45769 Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations 0.3%
• CVE-2024-7006 High 7.5 Libtiff: null pointer dereference in tif_dirinfo.c 1.5%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-5953 Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service 0.6%
• CVE-2024-3183 High 8.1 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 2.1%
• CVE-2024-2698 High 8.8 Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 0.7%
• CVE-2023-4727 High 7.5 Ca: token authentication bypass vulnerability 0.7%
• CVE-2024-3049 Medium 5.9 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 0.5%
• CVE-2024-5564 High 8.1 Libndp: buffer overflow in route information length field 1.2%
• CVE-2024-3657 High 7.5 389-ds-base: potential denial of service via specially crafted kerberos as-req request 1.3%
• CVE-2024-2199 Medium 5.7 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 0.6%
• CVE-2024-4418 Medium 6.2 Libvirt: stack use-after-free in virnetclientioeventloop() 0.5%
• CVE-2024-2905 Medium 6.2 Rpm-ostree: world-readable /etc/shadow file 0.3%
• CVE-2023-3758 High 7.1 Sssd: race condition during authorization leads to gpo policies functioning inconsistently 1.0%
• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%