Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

60 CVEs affecting Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Latest disclosed: 2026-07-09. Critical: 2, High: 42.

Top CVEs affecting Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
CVESeverityScorePublishedSummary
CVE-2026-4408Critical9.02026-05-28A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password s…
CVE-2026-4480Critical9.02026-05-26A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command"…
CVE-2026-14474High8.82026-07-07A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree…
CVE-2026-11610High8.82026-07-07A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF…
CVE-2026-52720High8.82026-06-15A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than indivi…
CVE-2026-10649High8.62026-06-16A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By…
CVE-2026-5260High8.22026-05-26A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed…
CVE-2026-42013High8.22026-05-26A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall ba…
CVE-2026-14476High8.02026-07-07A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LD…
CVE-2026-3012High8.02026-05-27A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate…
CVE-2026-54228High7.82026-06-13A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-crea…
CVE-2026-50264High7.82026-06-05An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBa…
CVE-2026-50261High7.82026-06-05A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-…
CVE-2026-50260High7.82026-06-05A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers c…
CVE-2026-50259High7.82026-06-05A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed b…
CVE-2026-50258High7.82026-06-05A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGrou…
CVE-2026-50257High7.82026-06-05A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-aft…
CVE-2026-50256High7.82026-06-05A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name…
CVE-2026-10118High7.82026-06-01A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers…
CVE-2026-48864High7.82026-05-26A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insuf…