Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Partial Red Hat: 31 fixed, 3 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| xdg | xdgmime | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 2.80.4-12.el10_2.22 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 2.80.4-4.el10_0.18 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.56.4-178.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 2.68.4-7.el9_2.8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 2.68.4-14.el9_4.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 2.68.4-16.el9_6.8 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791378395 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223279 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223719 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790272426 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589998 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589912 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589914 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589855 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621714 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621718 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621713 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791425869 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791427182 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791803821 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791473631 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791818357 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791473614 | Patch available | CNA |
| Red Hat | Red Hat Cost Management On-Premise 1 | — | 1791460851 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793206758 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194817 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194815 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194834 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793135861 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194815 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793135863 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276886 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276884 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790277045 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276889 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276974 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703497 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703506 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703590 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703568 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703586 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703494 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703615 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703516 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703524 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703601 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703516 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703608 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703579 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1790703516 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1791231820 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1791232257 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703542 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703539 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703553 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703631 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703597 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703641 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703541 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703545 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703656 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703557 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703707 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703645 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703706 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1789479916 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1789479900 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1789479891 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1789482961 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1789478095 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
- xdgmime Vendorxdg Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.80.4-12.el10_2.22 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 2.80.4-4.el10_0.18 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.56.4-178.el8_10 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.10 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.10 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-7.el9_2.8 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-14.el9_4.9 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.68.4-16.el9_6.8 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791378395 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223279 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223719 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790272426 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589998 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621714 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621718 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621713 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791425869 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791427182 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791803821 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791473631 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791818357 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791473614 Patch available CNA
- Red Hat Cost Management On-Premise 1 VendorRed Hat Affected — Fixed in 1791460851 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793206758 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194817 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194815 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194834 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793135861 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194815 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793135863 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276886 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276884 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790277045 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276889 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276974 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703497 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703506 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703590 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703568 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703586 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703494 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703615 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703516 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703524 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703601 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703516 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703608 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703579 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1790703516 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1791231820 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1791232257 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703542 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703539 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703553 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703631 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703597 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703641 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703541 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703545 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703552 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703656 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703557 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703707 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703645 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703706 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1789479916 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1789479900 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1789479891 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1789482961 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1789478095 Patch available CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
CPE names CNA · 31
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:10.2 | 10.2 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux_eus:10.0 | 10.0 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::crb | 8 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:8::baseos | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::crb | 9 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:9::baseos | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.2::baseos | 9.2 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.4::appstream | 9.4 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
- cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
Show 21 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:rhel_e4s:9.4::baseos | 9.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::appstream | 9.6 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::crb | 9.6 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:9.6::baseos | 9.6 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.17::el9 | 1.17 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.18::el9 | 1.18 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.20::el9 | 1.20 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.2::el9 | 3.2 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:cost_management_on_premise:1::el10 | 1 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.0::el9 | 3.0 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.2::el9 | 3.2 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:rhui:5::el9 | 5 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8 | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9 | 9 | — | Red Hat |
| cpe:/a:redhat:openshift_ai | — | — | Red Hat |
- cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::crb Versions 9.6 — ·Red Hat
- cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.17::el9 Versions 1.17 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.18::el9 Versions 1.18 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.20::el9 Versions 1.20 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.2::el9 Versions 3.2 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:cost_management_on_premise:1::el10 Versions 1 — ·Red Hat
- cpe:/a:redhat:enterprise_linux_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.0::el9 Versions 3.0 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.2::el9 Versions 3.2 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:rhui:5::el9 Versions 5 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
- cpe:/a:redhat:openshift_ai Versions — — ·Red Hat
Remediation
Red Hat 74 advisories
- RHSA-2026:92452 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:92449 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
Show 71 more Red Hat advisories
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82415 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cpu)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82371 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (spyre)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
- RHSA-2026:82368 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cuda)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.1
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82066 Released 2026-10-13 · Red Hat rating ImportantRed Hat AI Inference Model Optimization Tools 3.5.2 (CUDA)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/model-opt-cuda-rhel9
- RHSA-2026:82061 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference Tech Preview 3.5.2 (Gaudi)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-gaudi-rhel9
- RHSA-2026:82059 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (ROCm)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-rocm-rhel9
- RHSA-2026:81127 Released 2026-10-12 · Red Hat rating ImportantRed Hat AI Base Images 3.3.5 (CUDA 12.9)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:80756 Released 2026-10-12 · Red Hat rating ImportantRed Hat AI Base Images 3.3.5 (CUDA 13.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:79357 Released 2026-10-08 · Red Hat rating ImportantRed Hat Cost Management On-Premise container image update
- Red Hat Cost Management On-Premise 1 registry.redhat.io/costmanagement/costmanagement-ui-rhel10
- RHSA-2026:76042 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:75660 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:75659 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:75658 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:75657 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:75655 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Rubin)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
- RHSA-2026:75654 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:75652 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74771 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:74688 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:74687 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (ROCm 7.1)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
- RHSA-2026:74685 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:74683 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CUDA 13.0)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:74681 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Spyre)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74679 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74678 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Gaudi)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:74677 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (TPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:74674 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:74463 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74462 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:74461 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (Spyre)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74460 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74459 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74458 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (TPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:74450 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (Neuron)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:74365 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (Spyre)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74364 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (CUDA 12.9)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:74363 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (ROCm 7.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
- RHSA-2026:74362 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (CUDA 13.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:74361 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (ROCm 6.4)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:74360 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (TPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:74359 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.3.4 (CPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:73962 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cuda)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:73961 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (spyre)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:73960 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:73959 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (tpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73930 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (rocm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:73929 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (cuda)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:73909 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (rocm)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:73859 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:71403 Released 2026-09-24 · Red Hat rating Moderateglib2 security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) glib2-static-2.68.4-16.el9_6.8
- Red Hat Enterprise Linux AppStream EUS (v.9.6) glib2-devel-2.68.4-16.el9_6.8, glib2-doc-2.68.4-16.el9_6.8, glib2-tests-2.68.4-16.el9_6.8
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) glib2-2.68.4-16.el9_6.8
- RHSA-2026:71405 Released 2026-09-24 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) glib2-devel-2.68.4-7.el9_2.8, glib2-doc-2.68.4-7.el9_2.8, glib2-tests-2.68.4-7.el9_2.8
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) glib2-2.68.4-7.el9_2.8
- RHSA-2026:71404 Released 2026-09-24 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) glib2-devel-2.80.4-4.el10_0.18, glib2-tests-2.80.4-4.el10_0.18
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) glib2-2.80.4-4.el10_0.18
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) glib2-doc-2.80.4-4.el10_0.18, glib2-static-2.80.4-4.el10_0.18
- RHSA-2026:70636 Released 2026-09-23 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) glib2-devel-2.68.4-14.el9_4.9, glib2-doc-2.68.4-14.el9_4.9, glib2-tests-2.68.4-14.el9_4.9
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) glib2-2.68.4-14.el9_4.9
- RHSA-2026:67956 Released 2026-09-16 · Red Hat rating ImportantRed Hat Update Infrastructure 5.3 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
- RHSA-2026:66451 Released 2026-09-11 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux BaseOS (v. 8) glib2-2.56.4-178.el8_10, glib2-devel-2.56.4-178.el8_10, glib2-fam-2.56.4-178.el8_10 +1
- Red Hat Enterprise Linux CRB (v. 8) glib2-doc-2.56.4-178.el8_10, glib2-static-2.56.4-178.el8_10
- RHSA-2026:64800 Released 2026-09-08 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream (v. 9) glib2-devel-2.68.4-19.el9_8.10, glib2-doc-2.68.4-19.el9_8.10, glib2-tests-2.68.4-19.el9_8.10
- Red Hat Enterprise Linux BaseOS (v. 9) glib2-2.68.4-19.el9_8.10
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glib2-static-2.68.4-19.el9_8.10
- RHSA-2026:64799 Released 2026-09-08 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream (v. 10) glib2-devel-2.80.4-12.el10_2.22, glib2-tests-2.80.4-12.el10_2.22
- Red Hat Enterprise Linux BaseOS (v. 10) glib2-2.80.4-12.el10_2.22
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glib2-doc-2.80.4-12.el10_2.22, glib2-static-2.80.4-12.el10_2.22
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix yet |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502 |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2026:73859, RHSA-2026:73929, RHSA-2026:73930 |
| Red Hat AI Inference Server 3.5 | Fixed | RHSA-2026:82059, RHSA-2026:82061, RHSA-2026:82066, RHSA-2026:82368, RHSA-2026:82371, RHSA-2026:82415 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:71403 |
| Red Hat Cost Management On-Premise 1 | Fixed | RHSA-2026:79357 |
| Red Hat Enterprise Linux AI 3.5 | Fixed | RHSA-2026:92449, RHSA-2026:92452 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:64799 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:64800 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:71405 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:70636 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:71404 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:71403 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:64799 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:66451 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:64800 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:71405 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:70636 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:71404 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:71403 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:66451 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:64799 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:64800 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:71404 |
| Red Hat OpenShift AI 3.0 | Fixed | RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962 |
| Red Hat OpenShift AI 3.2 | Fixed | RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:74359, RHSA-2026:74360, RHSA-2026:74361, RHSA-2026:74362, RHSA-2026:74363, RHSA-2026:74364, RHSA-2026:74365, RHSA-2026:74450, RHSA-2026:80756, RHSA-2026:81127 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:74674, RHSA-2026:74677, RHSA-2026:74678, RHSA-2026:74679, RHSA-2026:74681, RHSA-2026:74683, RHSA-2026:74685, RHSA-2026:74687, RHSA-2026:74688 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:74771, RHSA-2026:75652, RHSA-2026:75654, RHSA-2026:75655, RHSA-2026:75657, RHSA-2026:75658, RHSA-2026:75659, RHSA-2026:75660, RHSA-2026:76042 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:67956 |
Not affected: 2 products
- Cert Manager support for Red Hat OpenShift release 1.20
- Red Hat OpenShift AI (RHOAI)
Timeline
- 2026-10-02 Threatist record created from CVE-2026-16118
- 2026-10-03 Alias added: GHSA-cp7g-r78m-cc2g
- 2026-10-05 Fix available: rhai/base-image-cpu-rhel9@1790703656, rhai/base-image-cuda-13.0-rhel9@1790703645, rhai/base-image-neuron-rhel9@1790703557 +4 · CNA
- 2026-10-05 7 new references · CNA
- 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75655 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
- 2026-10-05 Affected versions changed · Red Hat
- 2026-10-06 Fix available: rhai/base-image-cuda-12.9-rhel9@1790703706 · CNA
- 2026-10-06 1 new reference · CNA
- 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
- 2026-10-06 Affected versions changed · Red Hat
- 2026-10-09 Fix available: RHSA-2026:79357 · Red Hat
- 2026-10-09 Fix available: Red Hat Cost Management On-Premise 1 · Red Hat
- 2026-10-09 Fix available: costmanagement/costmanagement-ui-rhel10@1791460851 · CNA
- 2026-10-09 1 new reference · CNA
- 2026-10-12 Fix available: rhai/base-image-cuda-12.9-rhel9@1791232257, rhai/base-image-cuda-13.0-rhel9@1791231820 · CNA
- 2026-10-12 2 new references · CNA
- 2026-10-13 Fix available: rhaii/model-opt-cuda-rhel9@1791803821, rhaii/vllm-gaudi-rhel9@1791427182, rhaii/vllm-rocm-rhel9@1791425869 · CNA
- 2026-10-13 3 new references · CNA
- 2026-10-13 Fix available: RHSA-2026:82066 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:80756 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:81127 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:82061 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:82059 · Red Hat
- 2026-10-13 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791378395, cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076 +8 · CNA
- 2026-10-14 9 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
- 2026-10-29 Fix available: rhelai3/bootc-aws-cuda-rhel9@1793194817, rhelai3/bootc-azure-cuda-rhel9@1793194815, rhelai3/bootc-azure-rocm-rhel9@1793194834 +4 · CNA
- 2026-10-29 2 new references · CNA
- 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
- 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · Red Hat
References
Advisory 74
- RHSA-2026:64799
- RHSA-2026:64800
- RHSA-2026:66451
- RHSA-2026:67956
- RHSA-2026:70636
- RHSA-2026:71403
- RHSA-2026:71404
- RHSA-2026:71405
- RHSA-2026:72394
- RHSA-2026:72395
- RHSA-2026:72399
- RHSA-2026:72470
- RHSA-2026:72475
- RHSA-2026:72476
- RHSA-2026:72502
- RHSA-2026:73859
- RHSA-2026:73909
- RHSA-2026:73929
- RHSA-2026:73930
- RHSA-2026:73959
- RHSA-2026:73960
- RHSA-2026:73961
- RHSA-2026:73962
- RHSA-2026:74359
- RHSA-2026:74360
- RHSA-2026:74361
- RHSA-2026:74362
- RHSA-2026:74363
- RHSA-2026:74364
- RHSA-2026:74365
- RHSA-2026:74450
- RHSA-2026:74458
- RHSA-2026:74459
- RHSA-2026:74460
- RHSA-2026:74461
- RHSA-2026:74462
- RHSA-2026:74463
- RHSA-2026:74674
- RHSA-2026:74677
- RHSA-2026:74678
- RHSA-2026:74679
- RHSA-2026:74681
- RHSA-2026:74683
- RHSA-2026:74685
- RHSA-2026:74687
- RHSA-2026:74688
- RHSA-2026:74771
- RHSA-2026:75652
- RHSA-2026:75654
- RHSA-2026:75655
- RHSA-2026:75657
- RHSA-2026:75658
- RHSA-2026:75659
- RHSA-2026:75660
- RHSA-2026:76042
- RHSA-2026:79357
- RHSA-2026:80756
- RHSA-2026:81127
- RHSA-2026:82059
- RHSA-2026:82061
- RHSA-2026:82066
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82336
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82368
- RHSA-2026:82371
- RHSA-2026:82372
- RHSA-2026:82415
- RHSA-2026:82857
- RHSA-2026:82888
- RHSA-2026:92449
- RHSA-2026:92452
Sources
- CVE-2026-16118 · CVE Program
- CVE-2026-16118 · NVD
- FIRST EPSS
- GHSA-cp7g-r78m-cc2g · GitHub Advisory Database · CC BY 4.0
- CVE-2026-16118 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences