Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 17

• Critical 9.1
  CVE-2026-120642

  CGI versions before 5.00 for Perl return request-derived values untainted under taint mode

  CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some path_info and script_name values, Accept results, and the name lists from url_param and cookie are returned without the ta…

  libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  Nov 3, 2026
• High 8.8
  CVE-2026-119777

  Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

  A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an a…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 30, 2026
• High 8.8
  CVE-2026-120641

  CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths

  CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that…

  libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  Nov 3, 2026
• High 8.7
  CVE-2026-116591

  compress zstd: Panic on two-block frames

  compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.…

  klauspost compress kubescape zarf Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 26, 2026
• High 8.2
  CVE-2026-102554

  Denial of Service via Eager Array Allocation During Deserialization in Guava

  Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashS…

  Google Guava druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  Oct 9, 2026
• High 7.8
  CVE-2026-108094

  Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path

  A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progre…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 12, 2026
• High 7.8
  CVE-2026-119528

  Gimp: gimp: stack buffer overflow in psd image resource header loader

  A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a cras…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 30, 2026
• High 7.5
  CVE-2026-109832

  Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)

  A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A r…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Ubuntu
  Oct 13, 2026
• High 7.5
  CVE-2026-125704

  Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization

  A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an invalid character, an error path frees a mapped buffer before unmapping it. Applications that parse untrusted caps or structure data can re…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 10, 2026
• High 7.5
  CVE-2026-125712

  Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing

  A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiv…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Nov 10, 2026
• High 7.5
  CVE-2026-6554

  infinte loop in libpcap before 1.10.7

  libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted …

  The Tcpdump Group libpcap nmap libpcap Debian Ubuntu Azure Linux Alpine
  Sep 5, 2026
• High 7.5
  CVE-2026-69184

  c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains

  c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long desc…

  c-ares c-ares fluent-bit c-ares Debian Ubuntu Azure Linux
  Sep 18, 2026
• High 7.5
  CVE-2026-91150

  Cockpit: cockpit: denial of service via unbounded fragmented websocket messages

  A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 11, 2026
• High 7.5
  CVE-2026-96541

  Gnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadline

  A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline i…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  Sep 23, 2026
• High 7.3
  CVE-2026-91151

  Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper

  A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it ca…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 11, 2026
• Medium 6.5
  CVE-2026-120650

  CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits

  CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. $CGI::POST_MAX defaults to no limit, and when set is not enforced for chunked multipart bodies or for the boundary lin…

  libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  Nov 3, 2026
• Medium 5.3
  CVE-2026-69186

  c-ares: Memory-amplification denial of service via unvalidated DNS header record counts

  c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because process_answer() i…

  c-ares c-ares fluent-bit c-ares Debian Ubuntu Azure Linux
  Sep 18, 2026

Revision history

1. 2026-11-12 #2

   Neue Updates von Red Hat aufgenommen

2. 2026-11-11 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:98498 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98498
• Red Hat Security Advisory RHSA-2026:98510 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98510
• Red Hat Security Advisory RHSA-2026:98532 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98532
• Red Hat Security Advisory RHSA-2026:98620 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98620
• Red Hat Security Advisory RHSA-2026:98621 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98621
• Red Hat Security Advisory RHSA-2026:98622 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98622
• Red Hat Security Advisory RHSA-2026:98629 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98629
• Red Hat Security Advisory RHSA-2026:99012 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99012
• Red Hat Security Advisory RHSA-2026:99020 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99020
• Red Hat Security Advisory RHSA-2026:99090 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99090
• Red Hat Security Advisory RHSA-2026:99091 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99091
• Red Hat Security Advisory RHSA-2026:99118 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99118
• Red Hat Security Advisory RHSA-2026:99126 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99126
• Red Hat Security Advisory RHSA-2026:99130 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99130
• Red Hat Security Advisory RHSA-2026:99136 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99136
• Red Hat Security Advisory RHSA-2026:99152 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99152
• Red Hat Security Advisory RHSA-2026:99163 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99163
• Red Hat Security Advisory RHSA-2026:99168 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99168
• Red Hat Security Advisory RHSA-2026:99171 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99171
• Red Hat Security Advisory RHSA-2026:99213 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99213
• Red Hat Security Advisory RHSA-2026:99214 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99214
• Red Hat Security Advisory RHSA-2026:99215 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99215
• Red Hat Security Advisory RHSA-2026:99228 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99228
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-102554
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-108094
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-109832
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-116591
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-119528
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-119777
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-125704
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-125712
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-6554
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-69184
• RedHat Customer Portal vom 2026-11-11
  https://access.redhat.com/security/cve/cve-2026-96541
• Red Hat Security Advisory RHSA-2026:99128 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99128
• Red Hat Security Advisory RHSA-2026:99164 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99164
• Red Hat Security Advisory RHSA-2026:99141 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99141
• Red Hat Security Advisory RHSA-2026:99125 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99125
• Red Hat Security Advisory RHSA-2026:99092 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99092
• Red Hat Security Advisory RHSA-2026:99172 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99172
• Red Hat Security Advisory RHSA-2026:99212 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99212
• Red Hat Security Advisory RHSA-2026:99129 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99129
• Red Hat Security Advisory RHSA-2026:98498 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:99599
• https://access.redhat.com/errata/RHSA-2026:99603
  https://access.redhat.com/errata/RHSA-2026:98498
• Red Hat Security Advisory RHSA-2026:99635 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99635
• Red Hat Security Advisory RHSA-2026:99823 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99823
• Red Hat Security Advisory RHSA-2026:99849 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99849
• Red Hat Security Advisory RHSA-2026:99958 vom 2026-11-13
  https://access.redhat.com/errata/RHSA-2026:99958
• Red Hat Security Advisory RHSA-2026:99600 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99600
• Red Hat Security Advisory RHSA-2026:99707 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99707
• Red Hat Security Advisory RHSA-2026:99601 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99601
• Red Hat Security Advisory RHSA-2026:99690 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99690
• Red Hat Security Advisory RHSA-2026:99602 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99602
• Red Hat Security Advisory RHSA-2026:99963 vom 2026-11-13
  https://access.redhat.com/errata/RHSA-2026:99963