Known vulnerabilities in Red Hat Hardened Images

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	7.3 High	Aug 5, 2026
CVE-2026-71225	A flaw was found in libkcapi	6.5 Medium	Aug 5, 2026
CVE-2026-18739	Popt-devel: popt-static: off-by-one in poptstuffargs	2.5 Low	Aug 4, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-18220	An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils	7.8 High	Jul 29, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Medium	Jul 24, 2026
CVE-2026-16552	A flaw was found in systemd-tmpfiles	6.3 Medium	Jul 22, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-59851	Libssh: libssh: authentication bypass via missing gssapi principal check	8.8 High	Jul 21, 2026
CVE-2026-59850	A flaw was found in libssh	4.3 Medium	Jul 21, 2026
CVE-2026-59849	Libssh: libssh: denial of service via automatic certificate authentication loop	3.1 Low	Jul 21, 2026
CVE-2026-59848	A flaw was found in libssh	5.3 Medium	Jul 21, 2026
CVE-2026-59847	A flaw was found in libssh	5.9 Medium	Jul 21, 2026
CVE-2026-59846	Libssh: libssh: information disclosure via proxycommand %r username expansion	3.9 Low	Jul 21, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-59844	A flaw was found in libssh	6.5 Medium	Jul 21, 2026
CVE-2026-59845	A flaw was found in libssh	5.3 Medium	Jul 21, 2026
CVE-2026-59843	Libssh: libssh: denial of service via zero advertised channel packet size	6.5 Medium	Jul 21, 2026
CVE-2026-59842	Libssh: libssh: information disclosure via short gssapi curve25519 public key	3.7 Low	Jul 21, 2026
CVE-2026-15370	Libssh: libssh: stack buffer overflow in sftp server longname construction	6.7 Medium	Jul 21, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-48863	Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service	7.5 High	Jul 16, 2026

Other Red Hat products