Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 8)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 High	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026
CVE-2026-8632	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	8.5 High	May 20, 2026
CVE-2026-8631	A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software	9.3 Critical	May 20, 2026
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 High	May 20, 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 High	May 20, 2026
CVE-2026-42959	NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that…	8.7 High	May 20, 2026
CVE-2026-42944	NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when…	8.7 High	May 20, 2026
CVE-2026-9064	389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)	7.5 High	May 20, 2026
CVE-2026-8975	Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150	8.8 High	May 19, 2026
CVE-2026-8947	Use-after-free in the DOM: Bindings (WebIDL) component	7.3 High	May 19, 2026
CVE-2026-8946	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 High	May 19, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-44673	libyang is a YANG data modeling language library	7.5 High	May 14, 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Medium	May 14, 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 High	May 14, 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 High	May 14, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-42945	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42899	Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service…	7.5 High	May 12, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026

Other Red Hat products