Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*

part: o version: 8.8 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux Update Services For Sap Solutions (bb8a1217-5db1-5610-8a11-ba0f33996e6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3155 vulnerable 2026-06-08 07:23:08.344005 Yelp: arbitrary file read
HIGH (7.4)
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2784 vulnerable 2026-06-08 07:16:58.321598 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9675 vulnerable 2026-06-08 07:00:28.488230 Buildah: buildah allows arbitrary directory mount
HIGH (7.8)
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
Published: 2024-10-09T14:32:11.922Z
Updated: 2026-06-29T20:27:04.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1062 vulnerable 2026-06-08 06:25:39.138114 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
MEDIUM (5.5)
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
Published: 2024-02-12T13:04:39.944Z
Updated: 2026-02-25T19:30:57.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3972 vulnerable 2026-06-08 06:09:40.929915 Insights-client: unsafe handling of temporary files and directories
HIGH (7.8)
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unprivileged local user or attacker could create the /var/tmp/insights-client directory (owning the directory with read, write, and execute permissions) on the system. After the insights-client is registered by root, an attacker could then control the directory content that insights are using by putting malicious scripts into it and executing arbitrary code as root (trivially bypassing SELinux protections because insights processes are allowed to disable SELinux system-wide).
Published: 2023-11-01T15:54:52.093Z
Updated: 2026-04-06T14:29:37.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3899 vulnerable 2026-06-08 06:09:40.801917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3758 vulnerable 2026-06-08 06:09:40.491621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40438 vulnerable 2026-06-08 05:35:18.028701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6470 vulnerable 2026-06-08 05:14:11.617812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0211 vulnerable 2026-06-08 05:12:19.329663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.