Security
فارسی
All products

Red Hat Enterprise Linux 10/shim-unsigned-aarch64

Red Hat · Package
44 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()CVE-2026-45447 Multicluster Engine for Kubernetes/multicluster-engine/hive-rhel9Multicluster Engine for Kubernetes/multicluster-engine/hypershift-rhel9-operator Red Hat High No fix reported
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verificationCVE-2026-22796 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processingCVE-2026-22795 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed TimeStamp ResponseCVE-2025-69420 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processingCVE-2025-69421 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption callsCVE-2025-69418 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filterCVE-2025-68160 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncationCVE-2025-15469 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handlingCVE-2025-15468 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 fileCVE-2025-11187 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Medium No fix reported
openssl: openssl: Denial of Service due to out-of-bounds read in AES-CFB128CVE-2026-28386 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Medium No fix reported
openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authenticationCVE-2026-28387 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processingCVE-2026-28388 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service vulnerability in CMS processingCVE-2026-28389 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processingCVE-2026-31789 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processingCVE-2026-28390 Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundleConfidential Cluster Operator/redhat-user-workloads/attestation-key-register Red Hat Medium No fix reported
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesCVE-2026-45446 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: FFC-DH Peer Validation Uses Attacker-Supplied qCVE-2026-42770 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdateCVE-2026-42769 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()CVE-2026-42768 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported