Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-102560 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102559 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | 8.6 High | Sep 29, 2026 |
| CVE-2026-102558 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102557 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | 8.6 High | Sep 29, 2026 |
| CVE-2026-102556 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | 8.6 High | Sep 29, 2026 |
| CVE-2026-97024 | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc | 7.1 High | Sep 29, 2026 |
| CVE-2026-97023 | Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin | 7.1 High | Sep 28, 2026 |
| CVE-2026-96280 | Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems | 7.5 High | Sep 27, 2026 |
| CVE-2026-96889 | Librsvg: use-after-free when xml includes have duplicated entities | 7.8 High | Sep 23, 2026 |
| CVE-2026-96275 | Flatpak: flatpak: arbitrary write access as root via extra-data extraction | 8.8 High | Sep 23, 2026 |
| CVE-2026-96512 | A flaw was found in sudo | 7.8 High | Sep 23, 2026 |
| CVE-2026-80110 | Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint | 8.1 High | Sep 21, 2026 |
| CVE-2026-89058 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | 7.4 High | Sep 18, 2026 |
| CVE-2026-89059 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | 7.5 High | Sep 18, 2026 |
| CVE-2026-92925 | Redis: redis: out-of-bounds read via crafted cluster bus packets | 7.1 High | Sep 17, 2026 |
| CVE-2026-86320 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true | 7.8 High | Sep 17, 2026 |
| CVE-2026-75092 | Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins | 7.3 High | Sep 15, 2026 |
| CVE-2026-88924 | Gvfs: gvfs-admin socket ownership race permits local root | 7.0 High | Sep 10, 2026 |
| CVE-2026-18147 | Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url | 8.1 High | Sep 9, 2026 |
| CVE-2026-87766 | A flaw was found in bubblewrap | 8.8 High | Sep 9, 2026 |
| CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 High | Sep 8, 2026 |
| CVE-2026-76561 | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) | 7.2 High | Sep 8, 2026 |
| CVE-2026-18922 | A flaw was found in 389 Directory Server | 9.8 Critical | Sep 7, 2026 |
| CVE-2026-18453 | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | 7.5 High | Sep 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430