Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

• CVE-2025-6032 High 8.3 Podman: podman missing tls verification 0.5%
• CVE-2025-6019 High 7.0 Libblockdev: lpe from allow_active to root in libblockdev via udisks 0.5%
• CVE-2025-49180 High 7.8 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension 0.3%
• CVE-2025-49179 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension 0.3%
• CVE-2025-49178 Medium 5.5 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 0.2%
• CVE-2025-49177 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode 0.4%
• CVE-2025-49176 High 7.3 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension 0.4%
• CVE-2025-49175 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors 0.3%
• CVE-2025-4404 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 2.0%
• CVE-2025-6020 High 7.8 Linux-pam: linux-pam directory traversal 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2025-48798 High 7.3 Gimp: multiple use after free in xcf parser 0.2%
• CVE-2025-48797 High 7.3 Gimp: multiple heap buffer overflows in tga parser 0.3%
• CVE-2025-5024 High 7.4 Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus 0.8%
• CVE-2025-4945 Low 3.7 Libsoup: integer overflow in cookie expiration date handling in libsoup 0.7%
• CVE-2025-4948 High 7.5 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 1.1%
• CVE-2025-4373 Medium 4.8 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 0.6%
• CVE-2025-3891 High 7.5 Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 1.6%
• CVE-2025-46421 Medium 6.8 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 0.6%
• CVE-2025-46420 Medium 6.5 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 0.6%
• CVE-2025-46397 High 7.8 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation 0.3%
• CVE-2024-10306 Medium 5.4 Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests 0.4%
• CVE-2025-32911 Critical 9.0 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 1.0%
• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2025-32914 High 7.4 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 0.8%
• CVE-2025-32907 Medium 5.3 Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 0.7%
• CVE-2025-32906 High 7.5 Libsoup: out of bounds reads in soup_headers_parse_request() 1.3%
• CVE-2025-32913 High 7.5 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 0.8%
• CVE-2025-32053 Medium 6.5 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 0.7%
• CVE-2025-32052 Medium 6.5 Libsoup: heap buffer overflow in sniff_unknown() 0.7%
• CVE-2025-32050 Medium 5.9 Libsoup: integer overflow in append_param_quoted 0.8%
• CVE-2025-32049 High 7.5 Libsoup: denial of service attack to websocket server 1.1%
• CVE-2025-3155 High 7.4 Yelp: arbitrary file read 13.1%
• CVE-2025-2784 High 7.0 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 0.9%
• CVE-2025-2487 Medium 4.9 389-ds-base: null pointer dereference leads to denial of service 0.6%
• CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 1.4%
• CVE-2025-26601 High 7.8 Xorg: xwayland: use-after-free in syncinittrigger() 0.4%
• CVE-2025-26600 High 7.8 Xorg: xwayland: use-after-free in playreleasedevents() 0.4%
• CVE-2025-26599 High 7.8 Xorg: xwayland: use of uninitialized pointer in compredirectwindow() 0.4%
• CVE-2025-26598 High 7.8 Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() 0.4%
• CVE-2025-26597 High 7.8 Xorg: xwayland: buffer overflow in xkbchangetypesofkey() 0.4%
• CVE-2025-26596 High 7.8 Xorg: xwayland: heap overflow in xkbwritekeysyms() 0.4%
• CVE-2025-26595 High 7.8 Xorg: xwayland: buffer overflow in xkbvmodmasktext() 0.4%
• CVE-2025-26594 High 7.8 X.org: xwayland: use-after-free of the root cursor 0.4%
• CVE-2025-0624 High 7.6 Grub2: net: out-of-bounds write in grub_net_search_config_file() 1.4%
• CVE-2025-26465 Medium 6.8 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 7.7%