Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

• CVE-2026-50258 High 7.8 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels 0.2%
• CVE-2026-50259 High 7.8 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing 0.2%
• CVE-2026-50256 High 7.8 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch 0.2%
• CVE-2026-50257 High 7.8 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() 0.1%
• CVE-2026-10805 Medium 6.7 Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend 0.2%
• CVE-2026-43958 High 7.8 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service 0.2%
• CVE-2026-10118 High 7.8 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication 0.3%
• CVE-2026-4408 Critical 9.0 Samba: remote code execution in samr 2.5%
• CVE-2026-1933 High 7.1 Samba: missing access check on reparse point operations 0.9%
• CVE-2026-2340 Medium 6.5 Samba: vfs_worm does not block directory modification 0.9%
• CVE-2026-3012 High 8.0 Samba: group policy certificate enrollment uses http:// without validation 0.3%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2026-4480 Critical 9.0 Samba: samba: remote code execution in printing subsystem via unescaped job description 13.9%
• CVE-2026-9064 High 7.5 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 0.8%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-4802 High 8.0 Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 1.0%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-34002 Medium 6.1 Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 0.5%
• CVE-2026-34000 Medium 6.1 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. 0.5%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%
• CVE-2026-34003 High 7.8 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 0.2%
• CVE-2026-34001 High 7.8 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 0.3%
• CVE-2026-33999 High 7.8 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 0.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-35092 High 7.5 Corosync: corosync: denial of service via integer overflow in join message validation 1.0%
• CVE-2026-35091 High 8.2 Corosync: corosync: denial of service and information disclosure via crafted udp packet 0.9%
• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-5119 Medium 5.9 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 0.3%
• CVE-2026-4887 Medium 6.1 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image 0.6%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2025-14905 High 7.2 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 1.3%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%