Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-90947	Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file	7.8 High	Sep 14, 2026
CVE-2026-90949	Gimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatch	7.8 High	Sep 14, 2026
CVE-2026-90948	Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions	7.8 High	Sep 14, 2026
CVE-2026-89329	Device-mapper-multipath: local denial of service via blocking ipc send operations	6.2 Medium	Sep 11, 2026
CVE-2026-18495	Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough	6.1 Medium	Sep 11, 2026
CVE-2026-77159	Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink	5.5 Medium	Sep 11, 2026
CVE-2026-88914	Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser	4.4 Medium	Sep 11, 2026
CVE-2026-88924	Gvfs: gvfs-admin socket ownership race permits local root	7.0 High	Sep 10, 2026
CVE-2026-88859	Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction	6.3 Medium	Sep 10, 2026
CVE-2026-18147	Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url	8.1 High	Sep 9, 2026
CVE-2026-87876	Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)	3.0 Low	Sep 9, 2026
CVE-2026-87875	Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound	4.3 Medium	Sep 9, 2026
CVE-2026-87853	Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation	7.5 High	Sep 9, 2026
CVE-2026-18090	Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block	6.1 Medium	Sep 8, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-76561	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	7.2 High	Sep 8, 2026
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Medium	Sep 7, 2026
CVE-2026-19843	389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor	8.4 High	Sep 7, 2026
CVE-2026-18922	A flaw was found in 389 Directory Server	9.8 Critical	Sep 7, 2026
CVE-2026-18453	389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search	7.5 High	Sep 7, 2026
CVE-2026-18355	389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()	7.5 High	Sep 7, 2026
CVE-2026-76560	389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn	7.5 High	Sep 7, 2026
CVE-2026-79678	Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service	8.1 High	Sep 7, 2026
CVE-2026-76578	Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci	9.8 Critical	Sep 7, 2026
CVE-2026-85534	Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read	5.9 Medium	Sep 4, 2026

Other Red Hat products