Red Hat Enterprise Linux 7 Extended Lifecycle Support — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Red Hat Enterprise Linux 7 Extended Lifecycle Support, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-13601	Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications CWE-693	7.1	High	2026-06-29
CVE-2026-54230	Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites CWE-59	7.0	High	2026-06-13
CVE-2026-54229	Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking CWE-362	7.0	High	2026-06-13
CVE-2026-54228	Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories CWE-367	7.8	High	2026-06-13
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing CWE-190	7.5	High	2026-03-30
CVE-2026-4887	Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image CWE-193	6.1	Medium	2026-03-26

All 6 known CVE vulnerabilities affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support with full Chinese analysis, references, and POCs where available.