Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-110927	A flaw was found in OpenSSH	4.3 Moyenne	15 oct. 2026
CVE-2026-110924	A flaw was found in OpenSSH	4.8 Moyenne	15 oct. 2026
CVE-2026-110926	A flaw was found in OpenSSH	5.3 Moyenne	15 oct. 2026
CVE-2026-110925	A flaw was found in OpenSSH	5.4 Moyenne	15 oct. 2026
CVE-2026-110923	A flaw was found in OpenSSH	6.5 Moyenne	15 oct. 2026
CVE-2026-88842	A flaw was found in BusyBox dpkg	3.3 Faible	14 oct. 2026
CVE-2026-88829	A flaw was found in BusyBox httpd's reverse proxy feature	7.2 Élevée	14 oct. 2026
CVE-2026-90954	A flaw was found in BusyBox's dpkg-deb archive extraction	7.8 Élevée	14 oct. 2026
CVE-2026-88834	A flaw was found in BusyBox's httpd web server	3.7 Faible	13 oct. 2026
CVE-2026-88838	A flaw was found in BusyBox's mount utility	5.5 Moyenne	13 oct. 2026
CVE-2026-88833	A flaw was found in BusyBox's udhcpc DHCP client	6.5 Moyenne	13 oct. 2026
CVE-2026-108119	Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix	6.3 Moyenne	9 oct. 2026
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critique	9 oct. 2026
CVE-2026-107655	Cups: null pointer dereference via embedded job ticket comments allows remote denial of service	4.0 Moyenne	9 oct. 2026
CVE-2026-107445	A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when…	5.4 Moyenne	8 oct. 2026
CVE-2026-107444	A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when…	4.3 Moyenne	8 oct. 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 Élevée	7 oct. 2026
CVE-2026-106033	Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter	5.4 Moyenne	6 oct. 2026
CVE-2026-105326	Cups: cups: argument injection in mailto notifier via notify-recipient-uri	2.5 Faible	5 oct. 2026
CVE-2026-95512	Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader	5.5 Moyenne	2 oct. 2026
CVE-2026-103242	Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag	7.1 Élevée	30 sept. 2026
CVE-2026-95520	Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages	7.1 Élevée	29 sept. 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 Élevée	28 sept. 2026
CVE-2026-95521	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm	7.8 Élevée	24 sept. 2026
CVE-2026-95519	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)	7.8 Élevée	24 sept. 2026

Autres produits Red Hat