Aller au contenu

Vulnérabilités de Red Hat Red Hat Update Infrastructure 4 for Cloud Providers

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-103870 A flaw was found in pulp-rpm when it publishes a distribution tree 5.0 Moyenne 7 oct. 2026
CVE-2026-103868 A flaw was found in pulp-container when it authenticates to an upstream registry 6.5 Moyenne 7 oct. 2026
CVE-2026-90959 A path traversal vulnerability was found in pulpcore 8.1 Élevée 24 sept. 2026
CVE-2026-84232 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content 5.4 Moyenne 1 sept. 2026
CVE-2026-82327 Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data 5.5 Moyenne 28 août 2026
CVE-2026-12701 A path traversal vulnerability was found in pulpcore 9.0 Critique 20 juil. 2026
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service 7.5 Élevée 16 juil. 2026
CVE-2026-34993 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.4 Moyenne 2 juin 2026
CVE-2026-48526 PyJWT is a JSON Web Token implementation in Python 7.4 Élevée 28 mai 2026
CVE-2026-48864 A flaw was found in libsolv 7.8 Élevée 26 mai 2026
CVE-2026-9149 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 6.5 Moyenne 20 mai 2026
CVE-2026-9150 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 6.5 Moyenne 20 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-27459 pyOpenSSL is a Python wrapper around the OpenSSL library 7.2 Élevée 17 mars 2026
CVE-2026-1312 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Non notée 3 févr. 2026
CVE-2026-1287 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Non notée 3 févr. 2026
CVE-2026-1207 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Non notée 3 févr. 2026
CVE-2024-7923 An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to… 9.8 Critique 4 sept. 2024
CVE-2024-7143 A flaw was found in the Pulp package 6.7 Moyenne 7 août 2024
CVE-2023-50782 A flaw was found in the python-cryptography package 7.5 Élevée 5 févr. 2024
CVE-2023-50781 A flaw was found in m2crypto 7.5 Élevée 5 févr. 2024

Autres produits Red Hat