Skip to content

Red Hat security advisories

634 advisories across Red Hat

Company profile
Advisory
Red Hat QEMU: use after free
High8.8Sep 25
Rojo's "rojo serve" HTTP API
High8.1Sep 25
Red Hat Build of Keycloak: improper authorization
Medium6.6Sep 25
Red Hat Build of Keycloak: improper authentication
Medium6.8Sep 25
Red Hat pulpcore: path traversal
High8.1Sep 24
Red Hat rpm: code execution
High7.8Sep 24
Red Hat rpm: command injection
High7.8Sep 24
Red Hat Ansible Automation Platform 2: authentication bypass by spoofing
Medium6.8Sep 24
Red Hat Admin REST API of Keycloak: missing authorization
Medium4.3Sep 24
Red Hat GIMP.: out-of-bounds write
High7.8Sep 24
Red Hat Build of Keycloak: missing authorization
Medium4.2Sep 24
Red Hat Build of Keycloak: missing authorization
Medium6.6Sep 24
Red Hat OpenShift Container Platform 4: path traversal
High7.5Sep 23
Red Hat OpenShift Container Platform 4: attacker could send requests
High7.2Sep 23
Red Hat librsvg.: use after free
High7.8Sep 23
Red Hat: argument injection
Medium6.6Sep 23
A flaw was found in the Ansible Automation Platform automation controller
High7.2Sep 23
Red Hat: incomplete denylist
High7.1Sep 23
A flaw was found in the automation-controller instance install-bundle endpoint
Medium6.6Sep 23
A flaw was found in the Ansible Automation Platform automation-controller
Medium5.3Sep 23
A flaw was found in the Ansible Automation Platform automation-controller
Medium4.3Sep 23
Red Hat Ansible Automation: missing authorization
Critical9.9Sep 23
Red Hat: insecure direct object reference
Medium6.5Sep 23
Red Hat Ansible Automation Platform 2: server-side request forgery
Medium6.4Sep 23
Red Hat Ansible Automation Platform: cross-site scripting
High8.7Sep 23
Red Hat Ansible Automation Platform: format string
High8.7Sep 23
Red Hat Ansible Automation Platform: code execution
High7.6Sep 23
Red Hat automation-controller API: system information exposure
Medium5.3Sep 23
Red Hat Ansible Automation Platform 2: insecure direct object reference
Medium6.5Sep 23
Red Hat AWX: privilege escalation
Critical9.1Sep 23
Red Hat gnome-remote-desktop: denial of service
High7.5Sep 23
Red Hat GIMP: out-of-bounds read
Medium4.4Sep 23
Red Hat GIMP: information disclosure
Low2.5Sep 23
Red Hat Ansible Automation Platform: debug code left active
High8.2Sep 23
Red Hat Ansible Automation Platform: information disclosure in errors
High7.7Sep 23
Red Hat Ansible Automation Platform: remote code execution
Critical9.9Sep 23
Red Hat Ansible Automation Platform: spoofing
Critical9.9Sep 23
Red Hat Ansible Automation Platform 2: missing authorization
High8.5Sep 23
StringListPathField.to_internal_value
Medium4.1Sep 23
Red Hat: information disclosure in errors
Low2.7Sep 23
Red Hat: argument injection
Low3.1Sep 23
Red Hat: argument injection
Low3.1Sep 23
Red Hat: missing authorization
Medium5.0Sep 23
Red Hat: missing authorization
Medium4.3Sep 23
Red Hat Ansible Automation Platform 2: information disclosure in errors
Medium4.3Sep 23
URLModificationMiddleware resolves named-URL lookups against unfiltered...
Medium5.0Sep 23
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open
Medium5.3Sep 23
Red Hat: out-of-bounds read
Medium6.1Sep 23
BusyBox httpd treats yescrypt
Medium6.5Sep 23
Red Hat: out-of-bounds write
Medium6.7Sep 23
Red Hat Hardened Images: out-of-bounds read
Medium5.3Sep 23
Red Hat Hardened Images: buffer overflow
High7.5Sep 23
Red Hat: buffer overflow
High7.3Sep 23
Red Hat Enterprise Linux: path traversal
High8.8Sep 23
Red Hat Enterprise Linux: path traversal
Critical9.8Sep 23
Red Hat sudo.: code execution
High7.8Sep 23
Red Hat Conditional OTP authenticator of Keycloak: improper authentication
Medium6.8Sep 23
Red Hat Build of Keycloak: missing authorization
Medium4.2Sep 23
Red Hat Emacs: code execution
High7.8Sep 23
Red Hat Linux kernel: out-of-bounds write
High8.8Sep 22

The newest 60. Each project page has the full list.

About Red Hat

Red Hat, LLC is an American software company that provides open source software products to enterprises and is a subsidiary of IBM. Founded in 1993, Red Hat has its corporate headquarters in Raleigh, North Carolina, with other offices worldwide.

Elsewhere on fru.dev: Acquisitions · Paydays

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.