Red Hat Update Infrastructure 5

Vulnerabilities related to Red Hat Update Infrastructure 5 29

• Medium 6.5 An **expression language injection** has been found in the HeaderContentGuard.permit function in... An expression language injection has been found in the HeaderContentGuard.permit function in... CVE-2026-123084 Nov 11, 07:12
• Medium 5.0 Path Traversal in pulp-rpm CVE-2026-103870 Oct 7, 15:33
• High 8.1 A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url'... Path traversal reported (CVE-2026-90959). Confidential information can be exposed externally. CVE-2026-90959 Sep 25, 00:17
• High 7.8 Authorization Flaw in sudo Vulnerability in sudo (CVE-2026-96512). Successful exploitation can lead to full system takeover. CVE-2026-96512 Sep 23, 23:17
• High 8.5 A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this... Vulnerability reported (CVE-2026-74860). Successful exploitation can lead to full system takeover. CVE-2026-74860 Sep 8, 21:16
• Medium 5.4 Cross-Site Scripting (XSS) in pulpcore's content serving application Cross-site scripting in pulpcore's content serving application (CVE-2026-84232). Risk of unauthorized operations or information disclosure. CVE-2026-84232 Sep 2, 01:17
• High 7.0 Out-of-Bounds Write in GDB's STABS debug format parser CVE-2026-13732 Sep 1, 05:17
• High 7.5 Vulnerability in rsyslog CVE-2026-78002 Aug 28, 02:20
• High 7.5 Out-of-Bounds Read in Rsyslog Vulnerability in Rsyslog (CVE-2026-19654). Risk of unauthorized operations or information disclosure. CVE-2026-19654 Aug 13, 06:17
• Medium 4.4 Vulnerability in GNU tar's incremental dumpdir 'X' rename handling CVE-2026-18477 Aug 4, 03:30
• Medium 4.4 Vulnerability in GNU tar CVE-2026-18508 Aug 4, 03:30
• Medium 5.5 Vulnerability in dbus-broker CVE-2026-16730 Jul 24, 21:30
• Critical 9.0 A path traversal vulnerability was found in pulpcore. The relative_path_validator function only... Path traversal reported (CVE-2026-12701). Data can be tampered with by attackers. CVE-2026-12701 Jul 21, 00:32
• Medium 6.2 Vulnerability in p11-kit CVE-2026-13757 Jun 30, 04:16
• Low 3.7 Out-of-Bounds Read in OpenSSH Vulnerability in OpenSSH (CVE-2026-55654). Risk of unauthorized operations or information disclosure. CVE-2026-55654 Jun 23, 13:17
• Medium 6.6 Vulnerability in GnuTLS CVE-2026-42014 Jun 16, 11:16
• Low 3.7 Vulnerability in gnutls CVE-2026-5419 Jun 2, 06:30
• Medium 5.3 Vulnerability in gnutls CVE-2026-42015 May 27, 07:16
• Medium 5.5 Vulnerability in java CVE-2025-10911 May 6, 23:45
• Low 3.7 Vulnerability in gnutls CVE-2026-3832 May 1, 03:16
• Medium 5.0 Unrestricted File Upload in tar Vulnerability in tar (CVE-2026-5704). Data can be tampered with by attackers. CVE-2026-5704 Apr 7, 01:16
• Medium 5.3 Vulnerability in p11-kit CVE-2026-2100 Mar 27, 06:17
• High 7.5 Vulnerability in libarchive library CVE-2026-4111 Mar 14, 04:55
• Medium 4.0 Vulnerability in GnuTLS library CVE-2025-9820 Jan 27, 05:16
• Medium 6.5 Vulnerability in glib CVE-2025-14512 Dec 11, 2025
• Medium 5.6 Vulnerability in GLib CVE-2025-14087 Dec 10, 2025
• Medium 6.1 Out-of-Bounds Read in util-linux Vulnerability in util-linux (CVE-2025-14104). Risk of unauthorized operations or information disclosure. CVE-2025-14104 Dec 6, 2025
• High 7.7 Vulnerability in Codeready Linux Builder CVE-2025-13601 Nov 27, 2025
• Medium 4.4 Vulnerability in GNU Coreutils CVE-2025-5278 May 28, 2025