Red Hat Red Hat Update Infrastructure 5

• CVE-2026-103870 Medium 5.0 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids 0.2%
• CVE-2026-103868 Medium 6.5 Pulp-container: registry credentials are reused across remotes in a worker 0.2%
• CVE-2026-90959 High 8.1 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft 0.4%
• CVE-2026-96512 High 7.8 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 0.3%
• CVE-2026-74860 High 8.5 Libxml2: double-free/uaf in libxml2 python bindings 0.7%
• CVE-2026-84232 Medium 5.4 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content 0.2%
• CVE-2026-13732 High 7.0 Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf 0.1%
• CVE-2026-78002 High 7.5 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 1.1%
• CVE-2026-19654 High 7.5 Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd 0.8%
• CVE-2026-18477 Medium 4.4 Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape <0.1%
• CVE-2026-18508 Medium 4.4 Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 0.1%
• CVE-2026-16730 Medium 5.5 Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup 0.2%
• CVE-2026-12701 Critical 9.0 Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport 1.2%
• CVE-2026-58016 High 7.5 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 0.6%
• CVE-2026-14164 High 7.5 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 0.8%
• CVE-2026-13757 Medium 6.2 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing 0.2%
• CVE-2026-55654 Low 3.7 Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination 0.7%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-42014 Medium 6.6 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 0.1%
• CVE-2026-5419 Low 3.7 Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 0.5%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3832 Low 3.7 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 0.8%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-5704 Medium 5.0 Tar: tar: hidden file injection via crafted archives 0.4%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-5278 Medium 4.4 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 0.3%