<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities of Red Hat Enterprise Linux</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Vulnerabilities published under the CPE names of Red Hat Enterprise Linux.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 16:22:57 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-107168</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-107168</link>
      <description>M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()</description>
      <content:encoded>M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-107168</guid>
      <pubDate>Wed, 07 Oct 2026 12:36:35 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-104048</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-104048</link>
      <description>Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation</description>
      <content:encoded>Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-104048</guid>
      <pubDate>Tue, 06 Oct 2026 19:34:25 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-107169</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-107169</link>
      <description>M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8</description>
      <content:encoded>M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-107169</guid>
      <pubDate>Wed, 07 Oct 2026 14:34:50 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-107167</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-107167</link>
      <description>M17n-lib: heap use-after-free write in re_init_ic()</description>
      <content:encoded>M17n-lib: heap use-after-free write in re_init_ic()</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-107167</guid>
      <pubDate>Wed, 07 Oct 2026 14:34:45 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-106064</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-106064</link>
      <description>Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions</description>
      <content:encoded>Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-106064</guid>
      <pubDate>Wed, 07 Oct 2026 14:34:40 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-107170</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-107170</link>
      <description>M17n-lib: null dereference in minput_open_im() after failed m17n_init()</description>
      <content:encoded>M17n-lib: null dereference in minput_open_im() after failed m17n_init()</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-107170</guid>
      <pubDate>Wed, 07 Oct 2026 12:41:33 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2025-5914</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-5914</link>
      <description>Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c</description>
      <content:encoded>Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-5914</guid>
      <pubDate>Mon, 09 Jun 2025 19:53:48 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-106061</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-106061</link>
      <description>Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file</description>
      <content:encoded>Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-106061</guid>
      <pubDate>Wed, 07 Oct 2026 02:36:51 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-55655</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-55655</link>
      <description>Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions</description>
      <content:encoded>Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-55655</guid>
      <pubDate>Tue, 23 Jun 2026 03:36:25 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-55653</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-55653</link>
      <description>Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service</description>
      <content:encoded>Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-55653</guid>
      <pubDate>Tue, 23 Jun 2026 03:36:22 +0000</pubDate>
    </item>
  </channel>
</rss>
