Skip to content

Vulnerabilities of Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Is your version affected?

CVE Summary Score Published
CVE-2026-43125 In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The… 9.8 Critical May 6, 2026
CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in… 8.8 High May 6, 2026
CVE-2026-28780 Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server Not rated May 5, 2026
CVE-2026-25243 Redis is an in-memory data structure store 7.7 High May 5, 2026
CVE-2026-34002 Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 6.1 Medium May 5, 2026
CVE-2026-34000 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. 6.1 Medium May 5, 2026
CVE-2026-43964 Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash… 3.7 Low May 4, 2026
CVE-2026-33846 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 High May 4, 2026
CVE-2026-43037 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar… 9.8 Critical May 1, 2026
CVE-2026-43038 In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in… 9.8 Critical May 1, 2026
CVE-2026-33845 Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 High Apr 30, 2026
CVE-2026-3833 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Medium Apr 30, 2026
CVE-2026-42198 pgjdbc is an open source postgresql JDBC Driver 7.5 High Apr 29, 2026
CVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec 7.5 High Apr 29, 2026
CVE-2026-7323 Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0 7.3 High Apr 28, 2026
CVE-2026-7322 Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0 7.3 High Apr 28, 2026
CVE-2026-7320 Information disclosure due to incorrect boundary conditions in the Audio/Video component 7.5 High Apr 28, 2026
CVE-2026-34003 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 7.8 High Apr 23, 2026
CVE-2026-34001 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 7.8 High Apr 23, 2026
CVE-2026-33999 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 7.8 High Apr 23, 2026
CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a… 7.4 High Apr 16, 2026
CVE-2026-4878 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 6.7 Medium Apr 9, 2026
CVE-2026-32280 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… 7.5 High Apr 8, 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 High Apr 8, 2026
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to… 7.5 High Apr 8, 2026

Other Red Hat products