Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-82324	Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0	6.1 Medium	Aug 28, 2026
CVE-2026-81893	Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery	4.7 Medium	Aug 27, 2026
CVE-2026-5680	Undertow-core: undertow: denial of service via websocket permessage-deflate processing	7.5 High	Aug 27, 2026
CVE-2026-78002	Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function	7.5 High	Aug 27, 2026
CVE-2026-79902	Gimp: stack vla size underflow denial of service in seattle	5.5 Medium	Aug 26, 2026
CVE-2026-80185	Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root	5.7 Medium	Aug 25, 2026
CVE-2026-80186	Bluez: stack overflow in name2utf8 causes dos and potential code execution	7.6 High	Aug 25, 2026
CVE-2026-80101	Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation	4.4 Medium	Aug 25, 2026
CVE-2026-79992	Emacs: emacs: command injection via crafted filenames in tramp	7.8 High	Aug 25, 2026
CVE-2026-79655	Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write	7.8 High	Aug 25, 2026
CVE-2026-78701	389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos	6.5 Medium	Aug 25, 2026
CVE-2026-78322	File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers	6.5 Medium	Aug 25, 2026
CVE-2026-78475	Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader	6.1 Medium	Aug 24, 2026
CVE-2026-78465	Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit	7.0 High	Aug 24, 2026
CVE-2026-19685	Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	7.1 High	Aug 24, 2026
CVE-2026-78367	Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	7.0 High	Aug 24, 2026
CVE-2026-78376	Webkitgtk: use-after-free of jscvalue function parameters	8.8 High	Aug 24, 2026
CVE-2026-78323	Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates	6.5 Medium	Aug 24, 2026
CVE-2026-73199	Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value	6.5 Medium	Aug 20, 2026
CVE-2026-11861	Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships	9.6 Critical	Aug 20, 2026
CVE-2026-73198	Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read	7.5 High	Aug 20, 2026
CVE-2026-13097	Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore	8.7 High	Aug 20, 2026
CVE-2026-73196	Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding	4.3 Medium	Aug 20, 2026
CVE-2026-73197	Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read	7.5 High	Aug 20, 2026

Other Red Hat products