Vulnerabilities of Red Hat Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Medium	Oct 16, 2026
CVE-2026-89088	Parted: parted: denial of service via heap buffer overflow during fat16 resize	5.5 Medium	Oct 16, 2026
CVE-2026-89085	Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image	6.6 Medium	Oct 16, 2026
CVE-2026-111802	A flaw was found in Nautilus	6.6 Medium	Oct 16, 2026
CVE-2026-17591	A flaw was found in libarchive	3.6 Low	Oct 16, 2026
CVE-2026-62438	A flaw was found in GIMP	6.1 Medium	Oct 16, 2026
CVE-2026-62439	Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability	7.0 High	Oct 16, 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Medium	Oct 16, 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Medium	Oct 16, 2026
CVE-2026-89098	Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd	5.5 Medium	Oct 16, 2026
CVE-2026-111581	A flaw was found in libblockdev	3.3 Low	Oct 16, 2026
CVE-2026-111555	Luksmeta: missing slot-range validation permits out-of-gap device i/o	6.0 Medium	Oct 16, 2026
CVE-2026-105958	Spice-server: spice: heap oob read/write via unchecked migration data offsets	7.5 High	Oct 16, 2026
CVE-2026-105959	Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation	7.5 High	Oct 16, 2026
CVE-2026-104715	Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	7.8 High	Oct 16, 2026
CVE-2026-110927	A flaw was found in OpenSSH	4.3 Medium	Oct 15, 2026
CVE-2026-110924	A flaw was found in OpenSSH	4.8 Medium	Oct 15, 2026
CVE-2026-110926	A flaw was found in OpenSSH	5.3 Medium	Oct 15, 2026
CVE-2026-110925	A flaw was found in OpenSSH	5.4 Medium	Oct 15, 2026
CVE-2026-110923	A flaw was found in OpenSSH	6.5 Medium	Oct 15, 2026
CVE-2026-110777	Evolution-data-server: local file disclosure via attach file:// uris	5.7 Medium	Oct 14, 2026
CVE-2026-109968	Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file	5.5 Medium	Oct 14, 2026
CVE-2026-100229	A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers)	6.5 Medium	Oct 14, 2026
CVE-2026-109971	Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool	4.7 Medium	Oct 14, 2026
CVE-2026-109970	Clevis: clevis: pkcs#11 token pin written to world-readable file	4.7 Medium	Oct 14, 2026

Other Red Hat products