Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*

part: o version: 9.6_s390x update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux For Ibm Z Systems Eus (3149e6b3-041b-53fe-b934-2ae23a5430ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6021 vulnerable 2026-06-08 07:43:14.105967 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
HIGH (7.5)
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Published: 2025-06-12T12:49:16.157Z
Updated: 2026-06-30T10:40:18.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3155 vulnerable 2026-06-08 07:23:08.328850 Yelp: arbitrary file read
HIGH (7.4)
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2784 vulnerable 2026-06-08 07:16:58.298012 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12088 vulnerable 2026-06-08 06:23:51.234930 Rsync: --safe-links option bypass leads to path traversal
MEDIUM (6.5)
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
Published: 2025-01-14T17:38:34.890Z
Updated: 2026-06-29T23:43:47.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12087 vulnerable 2026-06-08 06:23:51.226030 Rsync: path traversal vulnerability in rsync
MEDIUM (6.5)
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.
Published: 2025-01-14T17:57:33.927Z
Updated: 2026-06-29T23:43:47.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12085 vulnerable 2026-06-08 06:23:51.180514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0193 vulnerable 2026-06-08 06:21:59.958383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4911 vulnerable 2026-06-08 06:16:14.880294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3758 vulnerable 2026-06-08 06:09:40.469680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.