Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114236 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 3.3 Faible 21 oct. 2026
CVE-2026-92824 Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts 6.2 Moyenne 21 oct. 2026
CVE-2026-92822 Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml 6.2 Moyenne 21 oct. 2026
CVE-2026-92823 Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml 6.2 Moyenne 21 oct. 2026
CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string 5.1 Moyenne 21 oct. 2026
CVE-2026-113496 Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments 5.0 Moyenne 20 oct. 2026
CVE-2026-113495 Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments 5.0 Moyenne 20 oct. 2026
CVE-2026-112177 Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 7.3 Élevée 20 oct. 2026
CVE-2026-112261 Gimp: gimp: use-after-free in xcf loader via prop_selected_path 7.8 Élevée 19 oct. 2026
CVE-2026-112258 Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels 7.8 Élevée 19 oct. 2026
CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033) 7.8 Élevée 19 oct. 2026
CVE-2026-112260 Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing 7.1 Élevée 19 oct. 2026
CVE-2026-112259 Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import 5.5 Moyenne 19 oct. 2026
CVE-2026-112214 Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser 6.5 Moyenne 19 oct. 2026
CVE-2026-112210 A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc 6.0 Moyenne 19 oct. 2026
CVE-2026-16460 Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization 7.4 Élevée 19 oct. 2026
CVE-2026-16487 A flaw was found in bootc when operating with the default containers signature policy 8.1 Élevée 19 oct. 2026
CVE-2026-89096 Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd 5.9 Moyenne 16 oct. 2026
CVE-2026-89088 Parted: parted: denial of service via heap buffer overflow during fat16 resize 5.5 Moyenne 16 oct. 2026
CVE-2026-89085 Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image 6.6 Moyenne 16 oct. 2026
CVE-2026-111802 Nautilus: nautilus: arbitrary file deletion via trash symlink 6.6 Moyenne 16 oct. 2026
CVE-2026-17591 Libarchive: libarchive: use-after-free via aliased mac metadata copy 3.6 Faible 16 oct. 2026
CVE-2026-62438 Gimp: gimp: paa integer overflow out-of-bounds read 6.1 Moyenne 16 oct. 2026
CVE-2026-62439 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability 7.0 Élevée 16 oct. 2026
CVE-2026-85977 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding 5.3 Moyenne 16 oct. 2026

Autres produits Red Hat