Read the docs
TI-2026-52582 Aliases CVE-2026-74860GHSA-8626-cqqj-mfff

Libxml2: double-free/uaf in libxml2 python bindings

Priority MEDIUM 40CWE-763Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 37 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00658 51st percentileScored 2026-11-07
Fix Partial Red Hat: 44 advisoriesRed Hat: 37 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10—2.12.5-10.el10_2.4Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—2.12.5-9.el10_0.9Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—2.9.1-6.el7_9.20Patch availableCNA
Red HatRed Hat Enterprise Linux 8—2.9.7-21.el8_10.9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—2.9.7-21.el8_10.9Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—2.9.7-9.el8_4.20Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—2.9.7-9.el8_4.20Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—2.9.7-13.el8_6.24Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—2.9.7-13.el8_6.24Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—2.9.7-16.el8_8.24Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—2.9.7-16.el8_8.24Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.9.13-14.el9_8.5Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.9.13-14.el9_8.5Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—2.9.13-3.el9_2.20Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—2.9.13-13.el9_4.10Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—2.9.13-13.el9_6Patch availableCNA
Red HatCert Manager support for Red Hat OpenShift release 1.20—1790589912Patch availableCNA
Red HatCert Manager support for Red Hat OpenShift release 1.20—1790589914Patch availableCNA
Red HatCert Manager support for Red Hat OpenShift release 1.20—1790589855Patch availableCNA
Red HatRed Hat Cost Management On-Premise 1—1791460851Patch availableCNA
Red HatRed Hat Hardened Images—2.15.4-0.1.hum1Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793041986Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793041981Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793042072Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793042067Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793041987Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793329709Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793328358Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042006Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042145Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042006Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042011Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042086Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042088Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793041995Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042074Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042008Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793326837Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042010Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042162Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042004Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042092Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042117Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042093Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042114Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042024Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793042008Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1793327660Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791978534Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791978528Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791978528Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791964013Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791978693Patch availableCNA
Red HatRed Hat Enterprise Linux 10——Not affectedCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
Red HatRed Hat Enterprise Linux 8——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——Not affectedCNA
Red HatRed Hat Hardened Images——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 5——Not affectedCNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.12.5-10.el10_2.4 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 2.12.5-9.el10_0.9 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.9.1-6.el7_9.20 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.9.7-21.el8_10.9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.9.7-21.el8_10.9 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.9.7-9.el8_4.20 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.9.7-9.el8_4.20 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.9.7-13.el8_6.24 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.9.7-13.el8_6.24 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.9.7-16.el8_8.24 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.9.7-16.el8_8.24 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.9.13-14.el9_8.5 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.9.13-14.el9_8.5 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.9.13-3.el9_2.20 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.9.13-13.el9_4.10 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.9.13-13.el9_6 Patch available CNA
  • Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
  • Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
  • Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
  • Red Hat Cost Management On-Premise 1 VendorRed Hat Affected — Fixed in 1791460851 Patch available CNA
  • Red Hat Hardened Images VendorRed Hat Affected — Fixed in 2.15.4-0.1.hum1 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793041986 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793041981 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793042072 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793042067 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793041987 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793329709 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793328358 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042006 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042145 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042006 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042011 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042086 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042088 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793041995 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042074 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042008 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793326837 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042010 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042162 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042004 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042092 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042117 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042093 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042114 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042024 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793042008 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1793327660 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791978534 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791978528 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791978528 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791964013 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791978693 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Hardened Images VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — Not affected CNA

CPE names CNA · 39

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/o:redhat:enterprise_linux:8::baseos8—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
cpe:/o:redhat:rhel_aus:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
Show 29 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/o:redhat:rhel_aus:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/o:redhat:rhel_e4s:8.8::baseos8.8—Red Hat
cpe:/o:redhat:rhel_tus:8.8::baseos8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/o:redhat:enterprise_linux:9::baseos9—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/o:redhat:rhel_e4s:9.2::baseos9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/o:redhat:rhel_e4s:9.4::baseos9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/o:redhat:rhel_eus:9.6::baseos9.6—Red Hat
cpe:/a:redhat:cert_manager:1.20::el91.20—Red Hat
cpe:/a:redhat:cost_management_on_premise:1::el101—Red Hat
cpe:/a:redhat:hummingbird:11—Red Hat
cpe:/a:redhat:openshift_ai:3.0::el93.0—Red Hat
cpe:/a:redhat:openshift_ai:3.4::el93.4—Red Hat
cpe:/a:redhat:openshift_ai:3.5::el93.5—Red Hat
cpe:/a:redhat:rhui:5::el95—Red Hat
cpe:/a:redhat:enterprise_linux:1010—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
cpe:/a:redhat:enterprise_linux:88—Red Hat
cpe:/a:redhat:enterprise_linux:99—Red Hat
cpe:/a:redhat:openshift_ai——Red Hat
cpe:/a:redhat:openshift:44—Red Hat
cpe:/a:redhat:openshift:55—Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:8.8::baseos Versions 8.8 — ·Red Hat
  • cpe:/o:redhat:rhel_tus:8.8::baseos Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:cert_manager:1.20::el9 Versions 1.20 — ·Red Hat
  • cpe:/a:redhat:cost_management_on_premise:1::el10 Versions 1 — ·Red Hat
  • cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.0::el9 Versions 3.0 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.5::el9 Versions 3.5 — ·Red Hat
  • cpe:/a:redhat:rhui:5::el9 Versions 5 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
  • cpe:/a:redhat:openshift_ai Versions — — ·Red Hat
  • cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
  • cpe:/a:redhat:openshift:5 Versions 5 — ·Red Hat

Remediation

Red Hat 44 advisories

  • RHSA-2026:94476 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.8 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:94474 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.6 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:94468 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.7 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
Show 41 more Red Hat advisories
  • RHSA-2026:94459 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.8 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:93791 Released 2026-11-02 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) libxml2-2.9.1-6.el7_9.20, libxml2-2.9.1-6.el7_9.20.ppc, libxml2-devel-2.9.1-6.el7_9.20 +2
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) libxml2-static-2.9.1-6.el7_9.20, libxml2-static-2.9.1-6.el7_9.20.ppc
  • RHSA-2026:93463 Released 2026-11-02 · Red Hat rating Important
    libxml2 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) libxml2-devel-2.9.7-16.el8_8.24
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) libxml2-devel-2.9.7-16.el8_8.24
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) libxml2-2.9.7-16.el8_8.24, python3-libxml2-2.9.7-16.el8_8.24
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) libxml2-2.9.7-16.el8_8.24, python3-libxml2-2.9.7-16.el8_8.24
  • RHSA-2026:93473 Released 2026-11-02 · Red Hat rating Important
    libxml2 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libxml2-devel-2.9.7-9.el8_4.20
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libxml2-devel-2.9.7-9.el8_4.20
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) libxml2-2.9.7-9.el8_4.20, python3-libxml2-2.9.7-9.el8_4.20
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) libxml2-2.9.7-9.el8_4.20, python3-libxml2-2.9.7-9.el8_4.20
  • RHSA-2026:92589 Released 2026-10-29 · Red Hat rating Important
    libxml2 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) libxml2-devel-2.9.7-13.el8_6.24
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libxml2-devel-2.9.7-13.el8_6.24
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) libxml2-2.9.7-13.el8_6.24, python3-libxml2-2.9.7-13.el8_6.24
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libxml2-2.9.7-13.el8_6.24, python3-libxml2-2.9.7-13.el8_6.24
  • RHSA-2026:92352 Released 2026-10-29 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) libxml2-devel-2.9.13-3.el9_2.20
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) libxml2-2.9.13-3.el9_2.20, python3-libxml2-2.9.13-3.el9_2.20
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91246 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:91245 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91244 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:91243 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (TPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:91242 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91241 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91238 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:91237 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:91236 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:91235 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:91234 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:91233 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:91232 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91224 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:91219 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (ROCm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:91218 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:91217 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:91207 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:91206 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (Spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91204 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91202 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:90309 Released 2026-10-26 · Red Hat rating Important
    libxml2 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) libxml2-devel-2.9.13-13.el9_6
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) libxml2-2.9.13-13.el9_6, python3-libxml2-2.9.13-13.el9_6
  • RHSA-2026:89759 Released 2026-10-26 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) libxml2-devel-2.12.5-9.el10_0.9
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libxml2-2.12.5-9.el10_0.9, python3-libxml2-2.12.5-9.el10_0.9
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libxml2-static-2.12.5-9.el10_0.9
  • RHSA-2026:89750 Released 2026-10-26 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) libxml2-devel-2.9.13-13.el9_4.10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) libxml2-2.9.13-13.el9_4.10, python3-libxml2-2.9.13-13.el9_4.10
  • RHSA-2026:82939 Released 2026-10-14 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:79357 Released 2026-10-08 · Red Hat rating Important
    Red Hat Cost Management On-Premise container image update
    • Red Hat Cost Management On-Premise 1 registry.redhat.io/costmanagement/costmanagement-ui-rhel10
  • RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:71585 Released 2026-09-24 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) libxml2-devel-2.9.13-14.el9_8.5
    • Red Hat Enterprise Linux BaseOS (v. 9) libxml2-2.9.13-14.el9_8.5, python3-libxml2-2.9.13-14.el9_8.5
  • RHSA-2026:71641 Released 2026-09-24 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-21.el8_10.9
    • Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-21.el8_10.9, python3-libxml2-2.9.7-21.el8_10.9
  • RHSA-2026:71586 Released 2026-09-24 · Red Hat rating Important
    libxml2 security update
    • Red Hat Enterprise Linux AppStream (v. 10) libxml2-devel-2.12.5-10.el10_2.4
    • Red Hat Enterprise Linux BaseOS (v. 10) libxml2-2.12.5-10.el10_2.4, python3-libxml2-2.12.5-10.el10_2.4
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libxml2-static-2.12.5-10.el10_2.4
  • RHSA-2026:64463 Released 2026-09-06 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images libxml2-16-2.15.4-0.1.hum1@aarch64, libxml2-16-2.15.4-0.1.hum1@x86_64, libxml2-2.15.4-0.1.hum1@aarch64 +8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Cert Manager support for Red Hat OpenShift release 1.20Fixed RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476
Red Hat Cost Management On-Premise 1Fixed RHSA-2026:79357
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:71586
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:71641
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:71585
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:93473
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:92589
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:93463
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:92352
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:89750
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:89759
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:90309
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:93473
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:92589
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:93463
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:71586
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:71641
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:71585
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:93473
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:92589
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:93463
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:92352
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:89750
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:89759
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:90309
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:93473
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:92589
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:93463
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:71586
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:89759
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:93791
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:93791
Red Hat Hardened ImagesFixed RHSA-2026:64463
Red Hat OpenShift AI 3.0Fixed RHSA-2026:91206, RHSA-2026:91219, RHSA-2026:91232, RHSA-2026:91236, RHSA-2026:91243, RHSA-2026:94459, RHSA-2026:94476
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91217, RHSA-2026:91218, RHSA-2026:91233, RHSA-2026:91234, RHSA-2026:91235, RHSA-2026:91241, RHSA-2026:91244, RHSA-2026:91245, RHSA-2026:91248, RHSA-2026:94468
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91202, RHSA-2026:91204, RHSA-2026:91207, RHSA-2026:91224, RHSA-2026:91237, RHSA-2026:91238, RHSA-2026:91242, RHSA-2026:91246, RHSA-2026:91249, RHSA-2026:94474
Red Hat Update Infrastructure 5Fixed RHSA-2026:82939
Not affected: 8 products
  • Cert Manager support for Red Hat OpenShift release 1.20
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-74860
  2. 2026-10-03 Alias added: GHSA-8626-cqqj-mfff
  3. 2026-10-06 Affected versions changed · CNA
  4. 2026-10-06 Affected versions changed · Red Hat
  5. 2026-10-09 Fix available: RHSA-2026:79357 · Red Hat
  6. 2026-10-09 Fix available: Red Hat Cost Management On-Premise 1 · Red Hat
  7. 2026-10-09 Fix available: costmanagement/costmanagement-ui-rhel10@1791460851 · CNA
  8. 2026-10-09 1 new reference · CNA
  9. 2026-10-15 Fix available: rhui5/cds-kubernetes-rhel9@1791978534, rhui5/cds-rhel9@1791978528, rhui5/haproxy-rhel9@1791978528 +2 · CNA
  10. 2026-10-15 1 new reference · CNA
  11. 2026-10-16 Fix available: RHSA-2026:82939 · Red Hat
  12. 2026-10-16 Fix available: Red Hat Update Infrastructure 5 · Red Hat
  13. 2026-10-26 Fix available: libxml2@0:2.12.5-9.el10_0.9, libxml2@0:2.9.13-13.el9_4.10 · CNA
  14. 2026-10-26 2 new references · CNA
  15. 2026-10-26 Fix available: RHSA-2026:89759 · Red Hat
  16. 2026-10-26 Fix available: RHSA-2026:89750 · Red Hat
  17. 2026-10-26 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS E4S (v.9.4) +2 · Red Hat
  18. 2026-10-26 Fix available: libxml2@0:2.9.13-13.el9_6 · CNA
  19. 2026-10-26 1 new reference · CNA
  20. 2026-10-26 Fix available: RHSA-2026:90309 · Red Hat
  21. 2026-10-26 Fix available: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6) · Red Hat
  22. 2026-10-27 EPSS moved to the 50th–90th percentile
  23. 2026-10-27 Priority changed: LOW → MEDIUM
  24. 2026-10-29 Fix available: libxml2@0:2.9.13-3.el9_2.20 · CNA
  25. 2026-10-29 1 new reference · CNA
  26. 2026-10-29 Fix available: RHSA-2026:92352 · Red Hat
  27. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2) · Red Hat
  28. 2026-10-29 Fix available: rhai/base-image-cpu-rhel9@1793042072, rhai/base-image-cpu-rhel9@1793042088, rhai/base-image-cpu-rhel9@1793042162 +19 · CNA
  29. 2026-10-29 23 new references · CNA
  30. 2026-10-30 Fix available: RHSA-2026:91202 · Red Hat
  31. 2026-10-30 Fix available: RHSA-2026:91204 · Red Hat
  32. 2026-10-30 Fix available: RHSA-2026:91206 · Red Hat
  33. 2026-10-30 Fix available: RHSA-2026:91207 · Red Hat
  34. 2026-10-30 Fix available: RHSA-2026:91217 · Red Hat
  35. 2026-10-30 Fix available: RHSA-2026:91219 · Red Hat
  36. 2026-10-30 Fix available: RHSA-2026:91224 · Red Hat
  37. 2026-10-30 Fix available: RHSA-2026:91233 · Red Hat
  38. 2026-10-30 Fix available: RHSA-2026:91232 · Red Hat
  39. 2026-10-30 Fix available: RHSA-2026:91218 · Red Hat
  40. 2026-10-30 Fix available: RHSA-2026:91235 · Red Hat
  41. 2026-10-30 Fix available: RHSA-2026:91234 · Red Hat
  42. 2026-10-30 Fix available: RHSA-2026:91241 · Red Hat
  43. 2026-10-30 Fix available: RHSA-2026:91237 · Red Hat
  44. 2026-10-30 Fix available: RHSA-2026:91238 · Red Hat
  45. 2026-10-30 Fix available: RHSA-2026:91242 · Red Hat
  46. 2026-10-30 Fix available: RHSA-2026:91236 · Red Hat
  47. 2026-10-30 Fix available: RHSA-2026:91245 · Red Hat
  48. 2026-10-30 Fix available: RHSA-2026:91246 · Red Hat
  49. 2026-10-30 Fix available: RHSA-2026:91243 · Red Hat
  50. 2026-10-30 Fix available: RHSA-2026:91244 · Red Hat
  51. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  52. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  53. 2026-10-30 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS AUS (v.8.6) +4 · Red Hat
  54. 2026-10-30 Fix available: libxml2@0:2.9.7-13.el8_6.24 · CNA
  55. 2026-10-30 1 new reference · CNA
  56. 2026-10-30 Fix available: RHSA-2026:92589 · Red Hat
  57. 2026-11-02 Fix available: libxml2@0:2.9.7-9.el8_4.20 · CNA
  58. 2026-11-02 1 new reference · CNA
  59. 2026-11-02 Fix available: libxml2@0:2.9.7-16.el8_8.24 · CNA
  60. 2026-11-02 1 new reference · CNA
  61. 2026-11-02 Fix available: RHSA-2026:93473 · Red Hat
  62. 2026-11-02 Fix available: RHSA-2026:93463 · Red Hat
  63. 2026-11-02 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) +5 · Red Hat
  64. 2026-11-02 Fix available: libxml2@0:2.9.1-6.el7_9.20 · CNA
  65. 2026-11-02 1 new reference · CNA
  66. 2026-11-02 Fix available: RHSA-2026:93791 · Red Hat
  67. 2026-11-02 Fix available: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS) · Red Hat
  68. 2026-11-03 Fix available: rhai/base-image-cpu-rhel9@1793329709, rhai/base-image-cuda-13.0-rhel9@1793326837 · CNA
  69. 2026-11-03 2 new references · CNA
  70. 2026-11-03 Fix available: RHSA-2026:94459 · Red Hat
  71. 2026-11-03 Fix available: RHSA-2026:94468 · Red Hat
  72. 2026-11-03 Affected versions changed · Red Hat
  73. 2026-11-04 Fix available: rhai/base-image-cuda-12.9-rhel9@1793327660, rhai/base-image-cuda-rhel9@1793328358 · CNA
  74. 2026-11-04 2 new references · CNA
  75. 2026-11-04 Fix available: RHSA-2026:94474 · Red Hat
  76. 2026-11-04 Fix available: RHSA-2026:94476 · Red Hat
  77. 2026-11-04 Affected versions changed · Red Hat
  78. 2026-11-06 Affected versions changed · CNA
  79. 2026-11-06 Affected versions changed · CNA
  80. 2026-11-06 Affected versions changed · Red Hat

References

Advisory 44

Other 2

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences