Vulnerabilities of Red Hat Red Hat CodeReady Linux Builder EUS (v.9.6)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 High	Apr 6, 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critical	Apr 3, 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 High	Apr 1, 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Medium	Mar 30, 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 High	Mar 27, 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Medium	Mar 27, 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 High	Mar 27, 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 High	Mar 25, 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 High	Mar 24, 2026
CVE-2026-27651	When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can…	7.5 High	Mar 24, 2026
CVE-2026-27654	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker…	8.2 High	Mar 24, 2026
CVE-2026-27784	The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might…	7.8 High	Mar 24, 2026
CVE-2026-32647	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…	7.8 High	Mar 24, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 High	Mar 18, 2026
CVE-2026-26740	Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the…	8.2 High	Mar 18, 2026
CVE-2026-2921	GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3083	GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3085	GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3082	GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2923	GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2922	GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026

Other Red Hat products