Rhui (Redhat) - vulnerabilities (CVEs)

104 CVEs, 3 in the last 30 days, 2 known versions, newest CVE from 2026-10-08. Vendor: Redhat.

CVEs of Rhui

CVE-2026-89091 - CVSS 8.8 (high), 2026-10-08: A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using…
CVE-2026-103870 - CVSS 5 (medium), 2026-10-07: A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or…
CVE-2026-103868 - CVSS 6.5 (medium), 2026-10-07: A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads…
CVE-2026-90959 - CVSS 8.1 (high), 2026-09-24: A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges…
CVE-2026-96512 - CVSS 7.8 (high), 2026-09-23: A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone…
CVE-2026-74860 - CVSS 8.5 (high), 2026-09-08: A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document…
CVE-2026-84232 - CVSS 5.4 (medium), 2026-09-01: A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g.,…
CVE-2026-13732 - CVSS 7 (high), 2026-08-31: A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code…
CVE-2026-82327 - CVSS 5.5 (medium), 2026-08-28: A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache…
CVE-2026-78002 - CVSS 7.5 (high), 2026-08-27: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending…
CVE-2026-19654 - CVSS 7.5 (high), 2026-08-12: A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery…
CVE-2026-18477 - CVSS 4.4 (medium), 2026-08-03: A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a…
CVE-2026-18508 - CVSS 4.4 (medium), 2026-08-03: A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level…
CVE-2026-16730 - CVSS 5.5 (medium), 2026-07-24: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled…
CVE-2026-12701 - CVSS 9 (critical), 2026-07-20: A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-16118 - CVSS 7.1 (high), 2026-07-17: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian…
CVE-2026-48863 - CVSS 7.5 (high), 2026-07-16: A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when…
CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-14164 - CVSS 7.5 (high), 2026-06-30: A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain…
CVE-2026-13757 - CVSS 6.2 (medium), 2026-06-29: A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form…
CVE-2026-54371 - CVSS 8.4 (high), 2026-06-29: attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges…
CVE-2026-54369 - CVSS 8.4 (high), 2026-06-29: acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(),…
CVE-2026-55654 - CVSS 3.7 (low), 2026-06-23: A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application…
CVE-2026-55655 - CVSS 6.1 (medium), 2026-06-23: A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by…
CVE-2026-55653 - CVSS 6.5 (medium), 2026-06-23: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This…
CVE-2026-42055 - CVSS 9.2 (critical), 2026-06-17: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the…
CVE-2026-42014 - CVSS 6.6 (medium), 2026-06-16: A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free…
CVE-2026-47162 - CVSS 8.8 (high), 2026-06-11: Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the…
CVE-2026-45447 - CVSS 8.8 (high), 2026-06-09: Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A…
CVE-2026-34993 - CVSS 7.3 (high), 2026-06-02: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may…
CVE-2026-5419 - CVSS 3.7 (low), 2026-06-01: A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote…
CVE-2026-48526 - CVSS 7.4 (high), 2026-05-28: PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC…
CVE-2026-5260 - CVSS 8.2 (high), 2026-05-26: A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key…
CVE-2026-42013 - CVSS 8.2 (high), 2026-05-26: A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall…
CVE-2026-42015 - CVSS 5.3 (medium), 2026-05-26: A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the…
CVE-2026-42012 - CVSS 7.1 (high), 2026-05-26: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource…
CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
CVE-2026-9256 - CVSS 9.2 (critical), 2026-05-22: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex…
CVE-2026-9149 - CVSS 6.5 (medium), 2026-05-21: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
CVE-2026-9150 - CVSS 6.5 (medium), 2026-05-20: A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted…
CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-6477 - CVSS 8.8 (high), 2026-05-14: Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions…
CVE-2026-6478 - CVSS 8.2 (high), 2026-05-14: Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to…
CVE-2026-6473 - CVSS 8.8 (high), 2026-05-14: Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write…
CVE-2026-44432 - CVSS 8.9 (high), 2026-05-13: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1)…
CVE-2026-42945 - CVSS 9.2 (critical), 2026-05-13: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed…
CVE-2026-45186 - CVSS 7.5 (high), 2026-05-10: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
CVE-2026-42011 - CVSS 7.4 (high), 2026-05-07: A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs)…
CVE-2026-42010 - CVSS 9.8 (critical), 2026-05-07: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character…
CVE-2026-33846 - CVSS 7.5 (high), 2026-05-04: A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where…
CVE-2026-3832 - CVSS 3.7 (low), 2026-04-30: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP)…
CVE-2026-3833 - CVSS 7.4 (high), 2026-04-30: A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
CVE-2026-33845 - CVSS 9.1 (critical), 2026-04-30: A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and…
CVE-2026-4786 - CVSS 7.1 (high), 2026-04-13: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()"…
CVE-2026-6100 - CVSS 9.1 (critical), 2026-04-13: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a…
CVE-2026-4878 - CVSS 7 (high), 2026-04-09: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function.…
CVE-2026-5704 - CVSS 5.5 (medium), 2026-04-06: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully…
CVE-2026-34982 - CVSS 8.2 (high), 2026-04-06: Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user…
CVE-2026-35535 - CVSS 7.8 (high), 2026-04-03: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal…
CVE-2026-35385 - CVSS 8.1 (high), 2026-04-02: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is…
CVE-2026-5121 - CVSS 9.8 (critical), 2026-03-30: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker…
CVE-2026-2100 - CVSS 7.5 (high), 2026-03-26: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber…
CVE-2026-33412 - CVSS 7.3 (high), 2026-03-24: Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like…
CVE-2026-32647 - CVSS 8.5 (high), 2026-03-24: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or…
CVE-2026-27784 - CVSS 8.5 (high), 2026-03-24: The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write…
CVE-2026-27654 - CVSS 8.8 (high), 2026-03-24: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX…
CVE-2026-27651 - CVSS 8.7 (high), 2026-03-24: When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This…
CVE-2026-4519 - CVSS 7.1 (high), 2026-03-20: The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects…
CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2026-27135 - CVSS 7.5 (high), 2026-03-18: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data…
CVE-2026-27459 - CVSS 9.8 (critical), 2026-03-18: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to…
CVE-2026-4111 - CVSS 7.5 (high), 2026-03-13: A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a…
CVE-2026-3497 - CVSS 8.2 (high), 2026-03-12: Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux…
CVE-2026-25679 - CVSS 7.5 (high), 2026-03-06: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2026-2006 - CVSS 8.8 (high), 2026-02-12: Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer…
CVE-2026-2005 - CVSS 8.8 (high), 2026-02-12: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions…
CVE-2026-2004 - CVSS 8.8 (high), 2026-02-12: Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the…
CVE-2025-14831 - CVSS 5.3 (medium), 2026-02-09: A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via…
CVE-2026-1207 - CVSS 8.3 (high), 2026-02-03: An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on ``RasterField`` (only implemented on PostGIS) allows…
CVE-2026-1312 - CVSS 8.5 (high), 2026-02-03: An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `.QuerySet.order_by()` is subject to SQL injection in column aliases…
CVE-2026-1287 - CVSS 8.3 (high), 2026-02-03: An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `FilteredRelation` is subject to SQL injection in column aliases via…
CVE-2025-61726 - CVSS 7.5 (high), 2026-01-28: The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited…
CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2025-9820 - CVSS 4 (medium), 2026-01-26: A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label…
CVE-2026-23490 - CVSS 7.5 (high), 2026-01-16: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed…
CVE-2026-21441 - CVSS 8.9 (high), 2026-01-07: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in…
CVE-2025-14512 - CVSS 6.5 (medium), 2025-12-11: A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib…
CVE-2025-14087 - CVSS 9.8 (critical), 2025-12-10: A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code…
CVE-2025-14104 - CVSS 6.1 (medium), 2025-12-05: A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()`…
CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-10911 - CVSS 5.5 (medium), 2025-09-25: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
CVE-2025-6170 - CVSS 2.5 (low), 2025-06-16: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program…
CVE-2025-5278 - CVSS 4.4 (medium), 2025-05-27: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the…