Known vulnerabilities in Red Hat Update Infrastructure 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Not rated	Jan 27, 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Medium	Jan 26, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-14512	Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow	6.5 Medium	Dec 11, 2025
CVE-2025-14087	Glib: glib: buffer underflow in gvariant parser leads to heap corruption	5.6 Medium	Dec 10, 2025
CVE-2025-14104	Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames	6.1 Medium	Dec 5, 2025
CVE-2025-13601	Glib: integer overflow in in g_escape_uri_string()	7.7 High	Nov 26, 2025
CVE-2025-10911	Libxslt: use-after-free with key data stored cross-rvt	5.5 Medium	Sep 25, 2025
CVE-2025-6170	Libxml2: stack buffer overflow in xmllint interactive shell command handling	2.5 Low	Jun 16, 2025
CVE-2025-5278	Coreutils: heap buffer under-read in gnu coreutils sort via key specification	4.4 Medium	May 27, 2025

Other Red Hat products