Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-7345	Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf	7.5 High	Jul 8, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5318	Libssh: out-of-bounds read in sftp_handle()	5.4 Medium	Jun 24, 2025
CVE-2025-6032	A flaw was found in Podman	8.3 High	Jun 24, 2025
CVE-2025-6019	A Local Privilege Escalation (LPE) vulnerability was found in libblockdev	7.0 High	Jun 19, 2025
CVE-2025-49180	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension	7.8 High	Jun 17, 2025
CVE-2025-49179	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension	7.3 High	Jun 17, 2025
CVE-2025-49178	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore	5.5 Medium	Jun 17, 2025
CVE-2025-49177	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode	6.1 Medium	Jun 17, 2025
CVE-2025-49176	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension	7.3 High	Jun 17, 2025
CVE-2025-49175	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors	6.1 Medium	Jun 17, 2025
CVE-2025-4404	Freeipa: idm: privilege escalation from host to domain admin in freeipa	9.1 Critical	Jun 17, 2025
CVE-2025-6020	Linux-pam: linux-pam directory traversal	7.8 High	Jun 17, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6021	Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	7.5 High	Jun 12, 2025
CVE-2025-5914	Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	7.8 High	Jun 9, 2025
CVE-2025-5222	Icu: stack buffer overflow in the srbroot::addtag function	7.0 High	May 27, 2025
CVE-2025-48798	Gimp: multiple use after free in xcf parser	7.3 High	May 27, 2025
CVE-2025-48797	Gimp: multiple heap buffer overflows in tga parser	7.3 High	May 27, 2025
CVE-2025-5024	A flaw was found in gnome-remote-desktop	7.4 High	May 22, 2025
CVE-2025-4945	A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software	3.7 Low	May 19, 2025
CVE-2025-4948	Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup	7.5 High	May 19, 2025
CVE-2025-31223	The issue was addressed with improved checks	8.0 High	May 12, 2025
CVE-2025-4373	Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar	4.8 Medium	May 6, 2025

Other Red Hat products