Vulnérabilités connues pour Red Hat Update Infrastructure 5

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-14164	Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()	7.5 Élevée	30 juin 2026
CVE-2026-13757	P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	6.2 Moyenne	29 juin 2026
CVE-2026-54371	attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that…	8.4 Élevée	29 juin 2026
CVE-2026-54369	acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…	8.4 Élevée	29 juin 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Faible	23 juin 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Moyenne	23 juin 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Moyenne	23 juin 2026
CVE-2026-42055	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules	8.1 Élevée	17 juin 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Moyenne	16 juin 2026
CVE-2026-47162	Vim is an open source, command line text editor	7.3 Élevée	11 juin 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Non notée	9 juin 2026
CVE-2026-5419	Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal	3.7 Faible	1 juin 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 Élevée	26 mai 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Moyenne	26 mai 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 Élevée	26 mai 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 Élevée	26 mai 2026
CVE-2026-48864	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	7.8 Élevée	26 mai 2026
CVE-2026-9256	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 Élevée	22 mai 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 Élevée	18 mai 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Moyenne	14 mai 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 Élevée	14 mai 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 Élevée	14 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026
CVE-2026-42945	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 Élevée	13 mai 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Faible	10 mai 2026

Autres produits Red Hat