Red Hat Red Hat Update Infrastructure 4 for Cloud Providers

• CVE-2026-103870 Medium 5.0 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids 0.2%
• CVE-2026-103868 Medium 6.5 Pulp-container: registry credentials are reused across remotes in a worker 0.2%
• CVE-2026-90959 High 8.1 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft 0.4%
• CVE-2026-84232 Medium 5.4 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content 0.2%
• CVE-2026-82327 Medium 5.5 Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data 0.2%
• CVE-2026-12701 Critical 9.0 Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport 1.2%
• CVE-2026-48863 High 7.5 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service 0.8%
• CVE-2026-9149 Medium 6.5 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 0.3%
• CVE-2026-9150 Medium 6.5 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 0.4%
• CVE-2024-7923 Critical 9.8 Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 0.8%
• CVE-2024-7143 Medium 6.7 Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 0.6%
• CVE-2023-50782 High 7.5 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 1.1%
• CVE-2023-50781 High 7.5 M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 1.1%