Skip to content

Red Hat security advisories

634 advisories · 293 critical or high in 12 months · latest Sep 25

60 of 634 advisories

Advisory
Red Hat QEMU: use after free
High8.8Sep 25
Rojo's "rojo serve" HTTP API
High8.1Sep 25
Red Hat Build of Keycloak: improper authorization
Medium6.6Sep 25
Red Hat Build of Keycloak: improper authentication
Medium6.8Sep 25
Red Hat pulpcore: path traversal
High8.1Sep 24
Red Hat rpm: code execution
High7.8Sep 24
Red Hat rpm: command injection
High7.8Sep 24
Red Hat Ansible Automation Platform 2: authentication bypass by spoofing
Medium6.8Sep 24
Red Hat Admin REST API of Keycloak: missing authorization
Medium4.3Sep 24
Red Hat GIMP.: out-of-bounds write
High7.8Sep 24
Red Hat Build of Keycloak: missing authorization
Medium4.2Sep 24
Red Hat Build of Keycloak: missing authorization
Medium6.6Sep 24
Red Hat OpenShift Container Platform 4: path traversal
High7.5Sep 23
Red Hat OpenShift Container Platform 4: attacker could send requests
High7.2Sep 23
Red Hat librsvg.: use after free
High7.8Sep 23
Red Hat: argument injection
Medium6.6Sep 23
A flaw was found in the Ansible Automation Platform automation controller
High7.2Sep 23
Red Hat: incomplete denylist
High7.1Sep 23
A flaw was found in the automation-controller instance install-bundle endpoint
Medium6.6Sep 23
A flaw was found in the Ansible Automation Platform automation-controller
Medium5.3Sep 23
A flaw was found in the Ansible Automation Platform automation-controller
Medium4.3Sep 23
Red Hat Ansible Automation: missing authorization
Critical9.9Sep 23
Red Hat: insecure direct object reference
Medium6.5Sep 23
Red Hat Ansible Automation Platform 2: server-side request forgery
Medium6.4Sep 23
Red Hat Ansible Automation Platform: cross-site scripting
High8.7Sep 23
Red Hat Ansible Automation Platform: format string
High8.7Sep 23
Red Hat Ansible Automation Platform: code execution
High7.6Sep 23
Red Hat automation-controller API: system information exposure
Medium5.3Sep 23
Red Hat Ansible Automation Platform 2: insecure direct object reference
Medium6.5Sep 23
Red Hat AWX: privilege escalation
Critical9.1Sep 23
Red Hat gnome-remote-desktop: denial of service
High7.5Sep 23
Red Hat GIMP: out-of-bounds read
Medium4.4Sep 23
Red Hat GIMP: information disclosure
Low2.5Sep 23
Red Hat Ansible Automation Platform: debug code left active
High8.2Sep 23
Red Hat Ansible Automation Platform: information disclosure in errors
High7.7Sep 23
Red Hat Ansible Automation Platform: remote code execution
Critical9.9Sep 23
Red Hat Ansible Automation Platform: spoofing
Critical9.9Sep 23
Red Hat Ansible Automation Platform 2: missing authorization
High8.5Sep 23
StringListPathField.to_internal_value
Medium4.1Sep 23
Red Hat: information disclosure in errors
Low2.7Sep 23
Red Hat: argument injection
Low3.1Sep 23
Red Hat: argument injection
Low3.1Sep 23
Red Hat: missing authorization
Medium5.0Sep 23
Red Hat: missing authorization
Medium4.3Sep 23
Red Hat Ansible Automation Platform 2: information disclosure in errors
Medium4.3Sep 23
URLModificationMiddleware resolves named-URL lookups against unfiltered...
Medium5.0Sep 23
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open
Medium5.3Sep 23
Red Hat: out-of-bounds read
Medium6.1Sep 23
BusyBox httpd treats yescrypt
Medium6.5Sep 23
Red Hat: out-of-bounds write
Medium6.7Sep 23
Red Hat Hardened Images: out-of-bounds read
Medium5.3Sep 23
Red Hat Hardened Images: buffer overflow
High7.5Sep 23
Red Hat: buffer overflow
High7.3Sep 23
Red Hat Enterprise Linux: path traversal
High8.8Sep 23
Red Hat Enterprise Linux: path traversal
Critical9.8Sep 23
Red Hat sudo.: code execution
High7.8Sep 23
Red Hat Conditional OTP authenticator of Keycloak: improper authentication
Medium6.8Sep 23
Red Hat Build of Keycloak: missing authorization
Medium4.2Sep 23
Red Hat Emacs: code execution
High7.8Sep 23
Red Hat Linux kernel: out-of-bounds write
High8.8Sep 22
About Red Hat

Security advisories Red Hat publishes for its own products.

Red Hat elsewhere on fru.dev: Acquisitions · Paydays

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.