Vulnérabilités de Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-102560	Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth	8.6 Élevée	29 sept. 2026
CVE-2026-102559	Libsoup: libsoup: heap buffer overflow during websocket client-frame masking	8.6 Élevée	29 sept. 2026
CVE-2026-102558	Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth	8.6 Élevée	29 sept. 2026
CVE-2026-102557	Libsoup: libsoup: heap buffer overflow during websocket message reassembly	8.6 Élevée	29 sept. 2026
CVE-2026-102556	Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion	8.6 Élevée	29 sept. 2026
CVE-2026-97024	Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc	7.1 Élevée	29 sept. 2026
CVE-2026-97023	Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin	7.1 Élevée	28 sept. 2026
CVE-2026-96280	Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems	7.5 Élevée	27 sept. 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 Élevée	23 sept. 2026
CVE-2026-96275	Flatpak: flatpak: arbitrary write access as root via extra-data extraction	8.8 Élevée	23 sept. 2026
CVE-2026-96512	A flaw was found in sudo	7.8 Élevée	23 sept. 2026
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 Élevée	18 sept. 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 Élevée	18 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-86320	A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true	7.8 Élevée	17 sept. 2026
CVE-2026-88924	Gvfs: gvfs-admin socket ownership race permits local root	7.0 Élevée	10 sept. 2026
CVE-2026-18147	Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url	8.1 Élevée	9 sept. 2026
CVE-2026-87766	A flaw was found in bubblewrap	8.8 Élevée	9 sept. 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 Élevée	8 sept. 2026
CVE-2026-76561	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	7.2 Élevée	8 sept. 2026
CVE-2026-18922	A flaw was found in 389 Directory Server	9.8 Critique	7 sept. 2026
CVE-2026-18453	389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search	7.5 Élevée	7 sept. 2026
CVE-2026-18355	389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()	7.5 Élevée	7 sept. 2026
CVE-2026-76560	389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn	7.5 Élevée	7 sept. 2026

Autres produits Red Hat