Vulnerabilities of Red Hat Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-85498	A flaw was found in polkit	3.5 Low	Oct 29, 2026
CVE-2026-117548	389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service	6.5 Medium	Oct 29, 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 High	Oct 28, 2026
CVE-2026-116497	Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon	5.5 Medium	Oct 26, 2026
CVE-2026-115486	Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning	7.1 High	Oct 23, 2026
CVE-2026-115485	Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio	6.3 Medium	Oct 23, 2026
CVE-2026-115484	Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg	7.6 High	Oct 23, 2026
CVE-2026-115221	Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership	5.4 Medium	Oct 22, 2026
CVE-2026-115207	Patch: filename validation bypass in reversal fallback allows file creation outside the working directory	5.5 Medium	Oct 22, 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-85518	Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition	6.1 Medium	Oct 21, 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Medium	Oct 21, 2026
CVE-2026-112177	Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8	7.3 High	Oct 20, 2026
CVE-2026-112261	Gimp: gimp: use-after-free in xcf loader via prop_selected_path	7.8 High	Oct 19, 2026
CVE-2026-112258	Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels	7.8 High	Oct 19, 2026
CVE-2026-112257	Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)	7.8 High	Oct 19, 2026
CVE-2026-112260	Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing	7.1 High	Oct 19, 2026
CVE-2026-112259	Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import	5.5 Medium	Oct 19, 2026
CVE-2026-112214	Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser	6.5 Medium	Oct 19, 2026
CVE-2026-112210	A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc	6.0 Medium	Oct 19, 2026

Other Red Hat products