Enterprise Linux Update Services For Sap Solutions

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*

part: o version: 9.6 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux Update Services For Sap Solutions (bb8a1217-5db1-5610-8a11-ba0f33996e6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2784 vulnerable 2026-06-08 07:16:58.326642 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12088 vulnerable 2026-06-08 06:23:51.235163 Rsync: --safe-links option bypass leads to path traversal
MEDIUM (6.5)
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
Published: 2025-01-14T17:38:34.890Z
Updated: 2026-06-29T23:43:47.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12087 vulnerable 2026-06-08 06:23:51.226474 Rsync: path traversal vulnerability in rsync
MEDIUM (6.5)
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.
Published: 2025-01-14T17:57:33.927Z
Updated: 2026-06-29T23:43:47.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12085 vulnerable 2026-06-08 06:23:51.213268 Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4911 vulnerable 2026-06-08 06:16:14.891762 Glibc: buffer overflow in ld.so leading to privilege escalation
HIGH (7.8)
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Published: 2023-10-03T17:25:08.434Z
Updated: 2026-07-14T11:59:00.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3758 vulnerable 2026-06-08 06:09:40.495070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.