Vulnérabilités connues pour Red Hat Enterprise Linux 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-95512	Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader	5.5 Moyenne	2 oct. 2026
CVE-2026-86345	389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result	9.0 Critique	1 oct. 2026
CVE-2026-86344	389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue	7.5 Élevée	1 oct. 2026
CVE-2026-103641	Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder	5.5 Moyenne	1 oct. 2026
CVE-2026-103399	Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body	5.3 Moyenne	30 sept. 2026
CVE-2026-103242	Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag	7.1 Élevée	30 sept. 2026
CVE-2026-102560	Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth	8.6 Élevée	29 sept. 2026
CVE-2026-102559	Libsoup: libsoup: heap buffer overflow during websocket client-frame masking	8.6 Élevée	29 sept. 2026
CVE-2026-102558	Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth	8.6 Élevée	29 sept. 2026
CVE-2026-102555	Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding	8.2 Élevée	29 sept. 2026
CVE-2026-102557	Libsoup: libsoup: heap buffer overflow during websocket message reassembly	8.6 Élevée	29 sept. 2026
CVE-2026-102556	Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion	8.6 Élevée	29 sept. 2026
CVE-2026-95520	Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages	7.1 Élevée	29 sept. 2026
CVE-2026-97029	Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group	5.7 Moyenne	29 sept. 2026
CVE-2026-97024	Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc	7.1 Élevée	29 sept. 2026
CVE-2026-97027	Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files	3.6 Faible	28 sept. 2026
CVE-2026-97026	Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path	3.9 Faible	28 sept. 2026
CVE-2026-97025	Flatpak: flatpak: world-readable oci authentication token in system-helper cache path	3.2 Faible	28 sept. 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 Élevée	28 sept. 2026
CVE-2026-97023	Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin	7.1 Élevée	28 sept. 2026
CVE-2026-96284	Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following	2.5 Faible	27 sept. 2026
CVE-2026-96282	Flatpak: flatpak: extension metadata path traversal file existence oracle	3.1 Faible	27 sept. 2026
CVE-2026-96283	Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull	3.3 Faible	27 sept. 2026
CVE-2026-96281	Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes	6.2 Moyenne	27 sept. 2026
CVE-2026-96280	Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems	7.5 Élevée	27 sept. 2026

Autres produits Red Hat