Vulnerabilities of Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-6020	Linux-pam: linux-pam directory traversal	7.8 High	Jun 17, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6170	A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files	2.5 Low	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6021	Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	7.5 High	Jun 12, 2025
CVE-2025-5914	Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	7.8 High	Jun 9, 2025
CVE-2025-48798	Gimp: multiple use after free in xcf parser	7.3 High	May 27, 2025
CVE-2025-48797	Gimp: multiple heap buffer overflows in tga parser	7.3 High	May 27, 2025
CVE-2025-5024	A flaw was found in gnome-remote-desktop	7.4 High	May 22, 2025
CVE-2025-4945	A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software	3.7 Low	May 19, 2025
CVE-2025-4948	Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup	7.5 High	May 19, 2025
CVE-2025-31223	The issue was addressed with improved checks	8.0 High	May 12, 2025
CVE-2025-4373	Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar	4.8 Medium	May 6, 2025
CVE-2025-3891	Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled	7.5 High	Apr 29, 2025
CVE-2025-46421	Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server	6.8 Medium	Apr 24, 2025
CVE-2025-46420	Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c	6.5 Medium	Apr 24, 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critical	Apr 15, 2025
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Medium	Apr 15, 2025
CVE-2025-32914	Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process	7.4 High	Apr 14, 2025
CVE-2025-32906	Libsoup: out of bounds reads in soup_headers_parse_request()	7.5 High	Apr 14, 2025
CVE-2025-32913	Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header	7.5 High	Apr 14, 2025
CVE-2025-32049	Libsoup: denial of service attack to websocket server	7.5 High	Apr 3, 2025
CVE-2025-3155	Yelp: arbitrary file read	7.4 High	Apr 3, 2025
CVE-2025-2784	Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	7.0 High	Apr 3, 2025
CVE-2024-8176	Libexpat: expat: improper restriction of xml entity expansion depth in libexpat	7.5 High	Mar 14, 2025

Other Red Hat products