Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-85498	Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow	3.5 Low	Oct 29, 2026
CVE-2026-117548	389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service	6.5 Medium	Oct 29, 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 High	Oct 28, 2026
CVE-2026-115486	Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning	7.1 High	Oct 23, 2026
CVE-2026-115485	Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio	6.3 Medium	Oct 23, 2026
CVE-2026-115484	Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg	7.6 High	Oct 23, 2026
CVE-2026-115221	Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership	5.4 Medium	Oct 22, 2026
CVE-2026-115207	Patch: filename validation bypass in reversal fallback allows file creation outside the working directory	5.5 Medium	Oct 22, 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-85518	Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition	6.1 Medium	Oct 21, 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Medium	Oct 21, 2026
CVE-2026-112177	Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8	7.3 High	Oct 20, 2026
CVE-2026-112261	Gimp: gimp: use-after-free in xcf loader via prop_selected_path	7.8 High	Oct 19, 2026
CVE-2026-112258	Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels	7.8 High	Oct 19, 2026
CVE-2026-112257	Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)	7.8 High	Oct 19, 2026
CVE-2026-112260	Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing	7.1 High	Oct 19, 2026
CVE-2026-112259	Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import	5.5 Medium	Oct 19, 2026
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Medium	Oct 16, 2026
CVE-2026-89088	Parted: parted: denial of service via heap buffer overflow during fat16 resize	5.5 Medium	Oct 16, 2026
CVE-2026-89085	Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image	6.6 Medium	Oct 16, 2026
CVE-2026-111802	Nautilus: nautilus: arbitrary file deletion via trash symlink	6.6 Medium	Oct 16, 2026
CVE-2026-17591	Libarchive: libarchive: use-after-free via aliased mac metadata copy	3.6 Low	Oct 16, 2026
CVE-2026-62438	Gimp: gimp: paa integer overflow out-of-bounds read	6.1 Medium	Oct 16, 2026
CVE-2026-62439	Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability	7.0 High	Oct 16, 2026

Other Red Hat products