DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2026-01-04
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux bezüglich der Komponenten "tar" und "Scrapy" ausnutzen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-6176US | — | — | ||
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompres… | ||||
| CVE-2025-45582US | — | — | ||
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-2042 vom 2026-02-06external
- Red Hat Security Advisory vom 2026-01-04external
- Red Hat Security Advisory vom 2026-01-04external
- Red Hat Security Advisory RHSA-2026:0067 vom 2026-01-05external
- Red Hat Security Advisory RHSA-2026:0135 vom 2026-01-06external
- Red Hat Security Advisory RHSA-2026:0414 vom 2026-01-09external
- RedHat Security Advisoryexternal
- Red Hat Security Advisory RHSA-2026:0435 vom 2026-01-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan