Vulnerabilities of Red Hat Red Hat Update Infrastructure 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 High	Oct 8, 2026
CVE-2026-103870	A flaw was found in pulp-rpm when it publishes a distribution tree	5.0 Medium	Oct 7, 2026
CVE-2026-103868	A flaw was found in pulp-container when it authenticates to an upstream registry	6.5 Medium	Oct 7, 2026
CVE-2026-90959	A path traversal vulnerability was found in pulpcore	8.1 High	Sep 24, 2026
CVE-2026-96512	A flaw was found in sudo	7.8 High	Sep 23, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-84232	Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content	5.4 Medium	Sep 1, 2026
CVE-2026-13732	Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf	7.0 High	Aug 31, 2026
CVE-2026-78002	Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function	7.5 High	Aug 27, 2026
CVE-2026-19654	Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	7.5 High	Aug 12, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Medium	Jul 24, 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critical	Jul 20, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-16118	Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c	7.1 High	Jul 17, 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Medium	Jun 30, 2026
CVE-2026-58016	Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"	7.5 High	Jun 30, 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 High	Jun 30, 2026
CVE-2026-58013	Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	6.5 Medium	Jun 30, 2026
CVE-2026-58012	Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	6.5 Medium	Jun 30, 2026
CVE-2026-58010	Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	6.5 Medium	Jun 30, 2026
CVE-2026-58011	Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	6.5 Medium	Jun 30, 2026

Other Red Hat products