Vulnérabilités de Red Hat Red Hat Update Infrastructure 5

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 Élevée	8 oct. 2026
CVE-2026-103870	A flaw was found in pulp-rpm when it publishes a distribution tree	5.0 Moyenne	7 oct. 2026
CVE-2026-103868	A flaw was found in pulp-container when it authenticates to an upstream registry	6.5 Moyenne	7 oct. 2026
CVE-2026-90959	A path traversal vulnerability was found in pulpcore	8.1 Élevée	24 sept. 2026
CVE-2026-96512	A flaw was found in sudo	7.8 Élevée	23 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 Élevée	8 sept. 2026
CVE-2026-84232	Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content	5.4 Moyenne	1 sept. 2026
CVE-2026-13732	Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf	7.0 Élevée	31 août 2026
CVE-2026-78002	Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function	7.5 Élevée	27 août 2026
CVE-2026-19654	Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	7.5 Élevée	12 août 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Moyenne	3 août 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Moyenne	3 août 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Moyenne	24 juil. 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critique	20 juil. 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Moyenne	20 juil. 2026
CVE-2026-16118	Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c	7.1 Élevée	17 juil. 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Moyenne	30 juin 2026
CVE-2026-58016	Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"	7.5 Élevée	30 juin 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 Élevée	30 juin 2026
CVE-2026-58013	Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	6.5 Moyenne	30 juin 2026
CVE-2026-58012	Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	6.5 Moyenne	30 juin 2026
CVE-2026-58010	Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	6.5 Moyenne	30 juin 2026
CVE-2026-58011	Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	6.5 Moyenne	30 juin 2026

Autres produits Red Hat