Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

• CVE-2025-1244 High 8.8 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2.6%
• CVE-2024-12243 Medium 5.3 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 1.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-11218 High 8.6 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 0.4%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2024-11614 High 7.4 Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library 0.6%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-10963 High 7.4 Pam: improper hostname interpretation in pam_access leads to access control bypass 0.8%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-10041 Medium 4.7 Pam: libpam: libpam vulnerable to read hashed password 0.3%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-9676 Medium 6.5 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 1.3%
• CVE-2024-9407 Medium 4.7 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 0.3%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-2236 Medium 5.9 Libgcrypt: vulnerable to marvin attack 1.1%
• CVE-2024-0340 Medium 4.4 Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() 0.2%