Vulnérabilités de Red Hat Red Hat Enterprise Linux Server Optional (v. 7 ELS)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-4153	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 Élevée	11 avr. 2026
CVE-2026-4150	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 Élevée	11 avr. 2026
CVE-2026-34486	Exploitée Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	Non notée	9 avr. 2026
CVE-2026-29146	Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration	Non notée	9 avr. 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critique	7 avr. 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critique	3 avr. 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 Élevée	3 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 Élevée	31 mars 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 Élevée	27 mars 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Moyenne	27 mars 2026
CVE-2026-27856	Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack	7.4 Élevée	27 mars 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 Élevée	27 mars 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critique	26 mars 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 Élevée	26 mars 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 Élevée	25 mars 2026
CVE-2026-20664	The issue was addressed with improved memory handling	4.3 Moyenne	25 mars 2026
CVE-2026-28859	The issue was addressed with improved memory handling	4.3 Moyenne	25 mars 2026
CVE-2026-28857	The issue was addressed with improved memory handling	6.5 Moyenne	25 mars 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 Élevée	24 mars 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 Élevée	20 mars 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 Élevée	19 mars 2026
CVE-2026-4177	YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity…	9.1 Critique	16 mars 2026
CVE-2026-2921	GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability	7.8 Élevée	13 mars 2026
CVE-2026-3083	GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability	8.8 Élevée	13 mars 2026

Autres produits Red Hat