Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

• CVE-2026-4802 High 8.0 Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 1.0%
• CVE-2026-34002 Medium 6.1 Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 0.5%
• CVE-2026-34000 Medium 6.1 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. 0.5%
• CVE-2026-34003 High 7.8 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 0.2%
• CVE-2026-34001 High 7.8 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 0.3%
• CVE-2026-33999 High 7.8 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 0.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-35092 High 7.5 Corosync: corosync: denial of service via integer overflow in join message validation 1.0%
• CVE-2026-35091 High 8.2 Corosync: corosync: denial of service and information disclosure via crafted udp packet 0.9%
• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2025-14905 High 7.2 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 1.3%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13502 High 7.5 Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos 0.6%
• CVE-2025-13609 High 8.2 Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 0.5%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-62229 High 7.3 Xorg: xmayland: use-after-free in xpresentnotify structure creation 0.5%
• CVE-2025-62230 High 7.3 Xorg: xwayland: use-after-free in xkb client resource removal 0.3%
• CVE-2025-62231 High 7.3 Xorg: xmayland: value overflow in xkbsetcompatmap() 0.3%
• CVE-2025-11561 High 8.8 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 0.8%
• CVE-2025-11234 High 7.5 Qemu-kvm: vnc websocket handshake use-after-free 0.9%
• CVE-2025-7493 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 0.6%
• CVE-2025-11021 High 7.5 Libsoup: out-of-bounds read in cookie date handling of libsoup http library 0.6%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-9566 High 8.1 Podman: podman kube play command may overwrite host files 1.2%
• CVE-2025-8067 High 8.5 Udisks: out-of-bounds read in udisks daemon 0.7%
• CVE-2025-8941 High 7.8 Linux-pam: incomplete fix for cve-2025-6020 0.3%
• CVE-2025-6395 Medium 6.5 Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 0.8%
• CVE-2025-7425 High 7.8 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr 0.4%
• CVE-2025-32990 Medium 6.5 Gnutls: vulnerability in gnutls certtool template parsing 0.9%
• CVE-2025-32989 Medium 5.3 Gnutls: vulnerability in gnutls sct extension parsing 1.5%
• CVE-2025-32988 Medium 6.5 Gnutls: vulnerability in gnutls othername san export 1.5%
• CVE-2025-7345 High 7.5 Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf 1.3%
• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-5318 Medium 5.4 Libssh: out-of-bounds read in sftp_handle() 1.9%