Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-100229 A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers) 6.5 Moyenne 14 oct. 2026
CVE-2026-109971 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool 4.7 Moyenne 14 oct. 2026
CVE-2026-109970 Clevis: clevis: pkcs#11 token pin written to world-readable file 4.7 Moyenne 14 oct. 2026
CVE-2026-109969 Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask 4.7 Moyenne 14 oct. 2026
CVE-2026-100231 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters 6.1 Moyenne 14 oct. 2026
CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize 8.4 Élevée 14 oct. 2026
CVE-2026-110036 A flaw was found in device-mapper-persistent-data 3.3 Faible 13 oct. 2026
CVE-2026-105460 A flaw was found in BlueZ 5.5 Moyenne 13 oct. 2026
CVE-2026-109976 A flaw was found in the clevis PKCS#11 pin 4.7 Moyenne 13 oct. 2026
CVE-2026-109833 Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service 5.9 Moyenne 13 oct. 2026
CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted) 7.5 Élevée 13 oct. 2026
CVE-2026-109854 A flaw was found in m17n-lib 2.5 Faible 13 oct. 2026
CVE-2026-108094 Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path 7.8 Élevée 12 oct. 2026
CVE-2026-108093 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading 5.5 Moyenne 9 oct. 2026
CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry 5.5 Moyenne 9 oct. 2026
CVE-2026-107935 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose 9.3 Critique 9 oct. 2026
CVE-2026-107655 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service 4.0 Moyenne 9 oct. 2026
CVE-2026-107651 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader 5.5 Moyenne 8 oct. 2026
CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée 8 oct. 2026
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption 5.1 Moyenne 8 oct. 2026
CVE-2026-107466 Flatpak-builder: local file exfiltration via `file 6.1 Moyenne 8 oct. 2026
CVE-2026-107161 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients 7.5 Élevée 7 oct. 2026
CVE-2026-106067 Gimp: gimp: heap buffer overflow in hot color filter on oversized image 6.3 Moyenne 7 oct. 2026
CVE-2026-106066 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions 6.3 Moyenne 7 oct. 2026
CVE-2026-106065 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions 6.3 Moyenne 7 oct. 2026

Autres produits Red Hat