RHSA-2026:67956

Vulnerability from csaf_redhat - Published: 2026-09-16 10:07 - Updated: 2026-09-21 11:45
Summary
Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
Severity
Important
Notes
Topic: The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.
Details: Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-13221

A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not (false positives) or fail to match strings it should (false negatives). If these regular expressions are used for security-sensitive operations like access control or data filtering, this flaw could result in incorrect security decisions.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N
CWE-625 - Permissive Regular Expression
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64 —
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64 —
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64 —
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64 —
Threats
Impact Moderate
CVE-2026-14456

A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64 —
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64 —
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64 —
Workaround
Threats
Impact Important
CVE-2026-14457

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, where only the private key (with no certificate) is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. This issue results in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Low
CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CWE-122 - Heap-based Buffer Overflow
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64 —
Vendor Fix fix
Workaround
Threats
Impact Moderate
CVE-2026-18798

A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-415 - Double Free
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Moderate
CVE-2026-28420

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial of service.

4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64 —
Workaround
Threats
Impact Moderate
CVE-2026-49825

A flaw was found in lxml, a library for processing XML and HTML in Python. The `lxml.html.defs.link_attrs` were missing `xlink:href`, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics (SVG) or Mathematical Markup Language (MathML), potentially leading to information disclosure or arbitrary code execution in the context of the user's browser.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
CWE-166 - Improper Handling of Missing Special Element
Affected products
Fixed 1 product, the same list as for CVE-2026-13221
Known not affected 4 products, the same list as for CVE-2026-13221
Threats
Impact Important
CVE-2026-50219

A flaw was found in libexpat. This vulnerability occurs because the library, in versions before 2.8.2, does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation. This oversight can lead to a use-after-free condition, which may result in information disclosure, integrity loss, or denial of service.

4.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-911 - Improper Update of Reference Count
Affected products
Fixed 5 products, the same list as for CVE-2026-16118
Threats
Impact Moderate
CVE-2026-52859

A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.

5.0 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Moderate
CVE-2026-54874

A flaw was found in OpenSSL. Receiving a DTLS (Datagram Transport Layer Security) record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a small amount of network traffic.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-405 - Asymmetric Resource Consumption (Amplification)
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Low
CVE-2026-55892

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash. This leads to a Denial of Service (DoS), making the editor unavailable to the user.

5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Moderate
CVE-2026-56132

A flaw was found in libexpat, a library used for parsing XML data. An attacker could exploit a heap-based buffer overflow, a type of memory error, by providing specially crafted XML input. This vulnerability occurs when the library mishandles memory reallocation while processing XML, particularly when multiple parsers share data. Successful exploitation could allow the attacker to execute arbitrary code, access sensitive information, or cause the application to crash, leading to a denial of service.

6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 5 products, the same list as for CVE-2026-16118
Threats
Impact Moderate
CVE-2026-56392

A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.

4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Moderate
CVE-2026-59857

An out-of-bounds write vulnerability in Vim's spell_soundfold_sal() function allows an attacker to corrupt memory and crash the editor (Denial of Service) by supplying a specially crafted word during spell sound-folding.

5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Moderate
CVE-2026-63072

A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Moderate
CVE-2026-63073

A flaw was found in OpenSSL. A malicious CMP (Certificate Management Protocol) endpoint can send an unexpected distinguished name (DN) directly as the format string argument to ERR_raise_data(), causing the application to dereference and write to unrelated stack contents. This can lead to a crash in the CMP client, resulting in a denial of service.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-134 - Use of Externally-Controlled Format String
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Low
CVE-2026-63074

A flaw was found in OpenSSL. The CMP (Certificate Management Protocol) implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra certificates to cause memory exhaustion, eventually resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Low
CVE-2026-63075

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory exhaustion, eventually resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Low
CVE-2026-63076

A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 2 products, the same list as for CVE-2026-14456
Known not affected 3 products, the same list as for CVE-2026-14456
Threats
Impact Moderate
CVE-2026-73072

A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Important
CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Important
CVE-2026-73077

A vulnerability in Vim's shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Important
CVE-2026-73078

A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products
Fixed 4 products, the same list as for CVE-2026-28420
Known not affected 1 product, the same list as for CVE-2026-28420
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:67956 self
https://access.redhat.com/products/red-hat-update… external
https://access.redhat.com/security/cve/CVE-2026-13221 external
https://access.redhat.com/security/cve/CVE-2026-14456 external
https://access.redhat.com/security/cve/CVE-2026-14457 external
https://access.redhat.com/security/cve/CVE-2026-16118 external
https://access.redhat.com/security/cve/CVE-2026-18798 external
https://access.redhat.com/security/cve/CVE-2026-28420 external
https://access.redhat.com/security/cve/CVE-2026-49825 external
https://access.redhat.com/security/cve/CVE-2026-50219 external
https://access.redhat.com/security/cve/CVE-2026-52859 external
https://access.redhat.com/security/cve/CVE-2026-54874 external
https://access.redhat.com/security/cve/CVE-2026-55892 external
https://access.redhat.com/security/cve/CVE-2026-56132 external
https://access.redhat.com/security/cve/CVE-2026-56392 external
https://access.redhat.com/security/cve/CVE-2026-59857 external
https://access.redhat.com/security/cve/CVE-2026-63072 external
https://access.redhat.com/security/cve/CVE-2026-63073 external
https://access.redhat.com/security/cve/CVE-2026-63074 external
https://access.redhat.com/security/cve/CVE-2026-63075 external
https://access.redhat.com/security/cve/CVE-2026-63076 external
https://access.redhat.com/security/cve/CVE-2026-73072 external
https://access.redhat.com/security/cve/CVE-2026-73076 external
https://access.redhat.com/security/cve/CVE-2026-73077 external
https://access.redhat.com/security/cve/CVE-2026-73078 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-13221 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499727 external
https://www.cve.org/CVERecord?id=CVE-2026-13221 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13221 external
https://github.com/Perl/perl5/commit/03f74bbbd3a6… external
https://github.com/Perl/perl5/issues/23388 external
https://access.redhat.com/security/cve/CVE-2026-14456 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515348 external
https://www.cve.org/CVERecord?id=CVE-2026-14456 external
https://nvd.nist.gov/vuln/detail/CVE-2026-14456 external
https://github.com/openssl/openssl/commit/08e7756… external
https://github.com/openssl/openssl/commit/4084152… external
https://github.com/openssl/openssl/commit/f2f1465… external
https://openssl-library.org/news/secadv/20260813.txt external
https://access.redhat.com/security/cve/CVE-2026-14457 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517562 external
https://www.cve.org/CVERecord?id=CVE-2026-14457 external
https://nvd.nist.gov/vuln/detail/CVE-2026-14457 external
https://openssl-library.org/news/secadv/20260825.txt external
https://access.redhat.com/security/cve/CVE-2026-16118 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501732 external
https://www.cve.org/CVERecord?id=CVE-2026-16118 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16118 external
https://gitlab.freedesktop.org/xdg/xdgmime/-/work… external
https://access.redhat.com/security/cve/CVE-2026-18798 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517559 external
https://www.cve.org/CVERecord?id=CVE-2026-18798 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18798 external
https://access.redhat.com/security/cve/CVE-2026-28420 self
https://bugzilla.redhat.com/show_bug.cgi?id=2443484 external
https://www.cve.org/CVERecord?id=CVE-2026-28420 external
https://nvd.nist.gov/vuln/detail/CVE-2026-28420 external
https://github.com/vim/vim/commit/bb6de2105b160e7… external
https://github.com/vim/vim/releases/tag/v9.2.0076 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-49825 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520368 external
https://www.cve.org/CVERecord?id=CVE-2026-49825 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49825 external
https://github.com/fedora-python/lxml_html_clean/… external
https://github.com/fedora-python/lxml_html_clean/… external
https://github.com/fedora-python/lxml_html_clean/… external
https://github.com/lxml/lxml/commit/5927a6d5e8518… external
https://github.com/lxml/lxml/releases/tag/lxml-6.1.1 external
https://access.redhat.com/security/cve/CVE-2026-50219 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484620 external
https://www.cve.org/CVERecord?id=CVE-2026-50219 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50219 external
https://github.com/libexpat/libexpat/pull/1246 external
https://access.redhat.com/security/cve/CVE-2026-52859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487989 external
https://www.cve.org/CVERecord?id=CVE-2026-52859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-52859 external
https://github.com/vim/vim/commit/63680c6d3d52477… external
https://github.com/vim/vim/releases/tag/v9.2.0565 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-54874 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517564 external
https://www.cve.org/CVERecord?id=CVE-2026-54874 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54874 external
https://access.redhat.com/security/cve/CVE-2026-55892 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492975 external
https://www.cve.org/CVERecord?id=CVE-2026-55892 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55892 external
https://github.com/vim/vim/commit/8325b193bba5f01… external
https://github.com/vim/vim/releases/tag/v9.2.0662 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-56132 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490669 external
https://www.cve.org/CVERecord?id=CVE-2026-56132 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56132 external
https://github.com/libexpat/libexpat/pull/1272 external
https://access.redhat.com/security/cve/CVE-2026-56392 self
https://bugzilla.redhat.com/show_bug.cgi?id=2506694 external
https://www.cve.org/CVERecord?id=CVE-2026-56392 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56392 external
https://cert.pl/en/posts/2026/07/CVE-2026-56391 external
https://git.savannah.gnu.org/cgit/coreutils.git/ external
https://git.savannah.gnu.org/cgit/coreutils.git/c… external
https://access.redhat.com/security/cve/CVE-2026-59857 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498863 external
https://www.cve.org/CVERecord?id=CVE-2026-59857 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59857 external
https://github.com/vim/vim/commit/d22ff1c955ff87e… external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-63072 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517560 external
https://www.cve.org/CVERecord?id=CVE-2026-63072 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63072 external
https://access.redhat.com/security/cve/CVE-2026-63073 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517565 external
https://www.cve.org/CVERecord?id=CVE-2026-63073 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63073 external
https://access.redhat.com/security/cve/CVE-2026-63074 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517566 external
https://www.cve.org/CVERecord?id=CVE-2026-63074 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63074 external
https://access.redhat.com/security/cve/CVE-2026-63075 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517570 external
https://www.cve.org/CVERecord?id=CVE-2026-63075 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63075 external
https://access.redhat.com/security/cve/CVE-2026-63076 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517561 external
https://www.cve.org/CVERecord?id=CVE-2026-63076 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63076 external
https://access.redhat.com/security/cve/CVE-2026-73072 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514037 external
https://www.cve.org/CVERecord?id=CVE-2026-73072 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73072 external
https://github.com/vim/vim/commit/05c41c922309c7a… external
https://github.com/vim/vim/releases/tag/v9.2.0846 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-73076 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514034 external
https://www.cve.org/CVERecord?id=CVE-2026-73076 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73076 external
https://github.com/vim/vim/commit/581a2f3ac9c6f96… external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-73077 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514065 external
https://www.cve.org/CVERecord?id=CVE-2026-73077 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73077 external
https://github.com/vim/vim/commit/c5a82fe013e73c9… external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-73078 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514058 external
https://www.cve.org/CVERecord?id=CVE-2026-73078 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73078 external
https://github.com/vim/vim/commit/29c6fd090d45205… external
https://github.com/vim/vim/security/advisories/GH… external
Acknowledgments
asotyc
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:67956",
        "url": "https://access.redhat.com/errata/RHSA-2026:67956"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/products/red-hat-update-infrastructure",
        "url": "https://access.redhat.com/products/red-hat-update-infrastructure"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13221",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13221"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14456",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14456"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14457",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14457"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-16118",
        "url": "https://access.redhat.com/security/cve/CVE-2026-16118"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18798",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18798"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-28420",
        "url": "https://access.redhat.com/security/cve/CVE-2026-28420"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49825",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49825"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50219",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50219"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54874",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54874"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55892",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55892"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56132",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56132"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56392",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56392"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59857",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59857"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63072",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63072"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63073",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63073"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63074",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63074"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63075",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63075"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63076",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63076"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73072",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73072"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73076",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73076"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73077",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73077"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73078",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73078"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5",
        "url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67956.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update",
    "tracking": {
      "current_release_date": "2026-09-21T11:45:54+00:00",
      "generator": {
        "date": "2026-09-21T11:45:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:67956",
      "initial_release_date": "2026-09-16T10:07:58+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T10:07:58+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T10:08:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T11:45:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Update Infrastructure 5",
                "product": {
                  "name": "Red Hat Update Infrastructure 5",
                  "product_id": "Red Hat Update Infrastructure 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhui:5::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Update Infrastructure"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
                "product": {
                  "name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
                  "product_id": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cds-kubernetes-rhel9@sha256%3A1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-kubernetes-rhel9\u0026tag=1789479916"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
                "product": {
                  "name": "registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
                  "product_id": "registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cds-rhel9@sha256%3A4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-rhel9\u0026tag=1789479900"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
                "product": {
                  "name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
                  "product_id": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/haproxy-rhel9@sha256%3Aff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/haproxy-rhel9\u0026tag=1789479891"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
                "product": {
                  "name": "registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
                  "product_id": "registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/installer-rhel9@sha256%3Abb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/installer-rhel9\u0026tag=1789482961"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64",
                "product": {
                  "name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64",
                  "product_id": "registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhua-rhel9@sha256%3A4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/rhua-rhel9\u0026tag=1789478095"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64 as a component of Red Hat Update Infrastructure 5",
          "product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64"
        },
        "product_reference": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
        "relates_to_product_reference": "Red Hat Update Infrastructure 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64 as a component of Red Hat Update Infrastructure 5",
          "product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64"
        },
        "product_reference": "registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
        "relates_to_product_reference": "Red Hat Update Infrastructure 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64 as a component of Red Hat Update Infrastructure 5",
          "product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64"
        },
        "product_reference": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
        "relates_to_product_reference": "Red Hat Update Infrastructure 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64 as a component of Red Hat Update Infrastructure 5",
          "product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        },
        "product_reference": "registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
        "relates_to_product_reference": "Red Hat Update Infrastructure 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64 as a component of Red Hat Update Infrastructure 5",
          "product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        },
        "product_reference": "registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64",
        "relates_to_product_reference": "Red Hat Update Infrastructure 5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-13221",
      "cwe": {
        "id": "CWE-625",
        "name": "Permissive Regular Expression"
      },
      "discovery_date": "2026-07-13T17:01:13.173015+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499727"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not (false positives) or fail to match strings it should (false negatives). If these regular expressions are used for security-sensitive operations like access control or data filtering, this flaw could result in incorrect security decisions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "perl: Perl: Incorrect regular expression processing via large regular expressions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability moderate as exploiting it requires local access as well as complex buffer overflows to get access to running arbitrary code. Also a successful attack will depend strongly on the script that is housing the vulnerable regular expression. No production script should implicitly trust data and make security decisions, so the impact for a successful exploitation is very low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13221"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499727",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499727"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13221"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13221",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13221"
        },
        {
          "category": "external",
          "summary": "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch",
          "url": "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch"
        },
        {
          "category": "external",
          "summary": "https://github.com/Perl/perl5/issues/23388",
          "url": "https://github.com/Perl/perl5/issues/23388"
        }
      ],
      "release_date": "2026-07-13T15:40:11.035000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "perl: Perl: Incorrect regular expression processing via large regular expressions"
    },
    {
      "cve": "CVE-2026-14456",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T14:21:24.109249+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515348"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 9.8+, 10.2+, Red Hat Hardened Images, RHIVOS 2, and OpenShift 4.22 ship OpenSSL 3.5.x which includes the QUIC server implementation affected by this flaw. Earlier RHEL versions ship OpenSSL 3.2.x or below, which do not include the QUIC server feature and are not affected. The FIPS module is not affected as the QUIC implementation is outside the OpenSSL FIPS module boundary. Applications must explicitly enable the QUIC server listener to be vulnerable; simply having OpenSSL 3.5 installed does not expose the flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515348",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515348"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",
          "url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b",
          "url": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139",
          "url": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260813.txt",
          "url": "https://openssl-library.org/news/secadv/20260813.txt"
        }
      ],
      "release_date": "2026-08-13T13:55:52.370000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Rate-limit or firewall inbound QUIC (UDP 443) traffic at the network level to reduce exposure. If QUIC server functionality is not required, disable it and use TLS over TCP instead. The upstream fix introduces a default limit of 256 pending connections, configurable via SSL_set_value_uint(3ossl).",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server"
    },
    {
      "cve": "CVE-2026-14457",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-17T19:33:23.332000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, where only the private key (with no certificate) is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted \"signature_algorithms_cert\" TLS extension. This issue results in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RPK server signature algorithm selection can dereference a missing certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Server or client configurations with RPKs (RFC7250 Raw Public Keys) enabled, where only the private key (with no associated certificate) is configured, are vulnerable to this issue. However, key-only RPK configurations are not considered a best practice, limiting the exposure of this flaw. This issue can cause a NULL pointer dereference, resulting in a denial of service due to an application abort. There is no data disclosure or command execution. For these reasons, this vulnerability has been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14457"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14457",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14457"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14457",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14457"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RPK server signature algorithm selection can dereference a missing certificate"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "asotyc"
          ]
        }
      ],
      "cve": "CVE-2026-16118",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-07-17T13:20:23.862000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker must convince a user to install a malicious MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) and process it with an application performing MIME type detection, limiting its exposure. Also, only little-endian systems are vulnerable. Due to these reasons, this issue has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16118"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41",
          "url": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41"
        }
      ],
      "release_date": "2026-07-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Do not install a MIME magic file or content from untrusted sources.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c"
    },
    {
      "cve": "CVE-2026-18798",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2026-08-17T19:14:03.992000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517559"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: QUIC server may trigger double free when processing INITIAL packet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue can cause memory corruption due to the double free of the QRX object. However, there is currently no evidence it allows remote code execution, limiting the impact of this vulnerability to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517559",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517559"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18798",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: QUIC server may trigger double free when processing INITIAL packet"
    },
    {
      "cve": "CVE-2026-28420",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-02-27T23:02:26.039794+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2443484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim\u0027s terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2443484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28420"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/bb6de2105b160e729c34063",
          "url": "https://github.com/vim/vim/commit/bb6de2105b160e729c34063"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0076",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0076"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg"
        }
      ],
      "release_date": "2026-02-27T22:04:36.189000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator"
    },
    {
      "cve": "CVE-2026-49825",
      "cwe": {
        "id": "CWE-166",
        "name": "Improper Handling of Missing Special Element"
      },
      "discovery_date": "2026-08-20T15:01:41.793678+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520368"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in lxml, a library for processing XML and HTML in Python. The `lxml.html.defs.link_attrs` were missing `xlink:href`, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics (SVG) or Mathematical Markup Language (MathML), potentially leading to information disclosure or arbitrary code execution in the context of the user\u0027s browser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520368",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520368"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49825",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49825",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49825"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53b4e92e31f3ded9f2",
          "url": "https://github.com/fedora-python/lxml_html_clean/commit/322357ac61c6cf80fcbaba53b4e92e31f3ded9f2"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5",
          "url": "https://github.com/fedora-python/lxml_html_clean/releases/tag/0.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f",
          "url": "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f"
        },
        {
          "category": "external",
          "summary": "https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0",
          "url": "https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0"
        },
        {
          "category": "external",
          "summary": "https://github.com/lxml/lxml/releases/tag/lxml-6.1.1",
          "url": "https://github.com/lxml/lxml/releases/tag/lxml-6.1.1"
        }
      ],
      "release_date": "2026-08-20T14:42:30.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href"
    },
    {
      "cve": "CVE-2026-50219",
      "cwe": {
        "id": "CWE-911",
        "name": "Improper Update of Reference Count"
      },
      "discovery_date": "2026-06-04T06:01:07.420180+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libexpat. This vulnerability occurs because the library, in versions before 2.8.2, does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation. This oversight can lead to a use-after-free condition, which may result in information disclosure, integrity loss, or denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50219"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50219",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50219"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50219",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50219"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/1246",
          "url": "https://github.com/libexpat/libexpat/pull/1246"
        }
      ],
      "release_date": "2026-06-04T04:20:32.666000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking"
    },
    {
      "cve": "CVE-2026-52859",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-11T19:02:24.309768+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487989"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Vim allows a local attacker to cause a denial of service. By displaying specially crafted output within a Vim `:terminal` window, an attacker can trigger an out-of-bounds write, leading to the application crashing. This primarily impacts users who interact with untrusted content or execute untrusted programs within Vim\u0027s terminal emulator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487989",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487989"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19",
          "url": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0565",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0565"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm"
        }
      ],
      "release_date": "2026-06-11T18:33:09.886000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Users should exercise caution when opening untrusted files or executing untrusted programs within vim\u0027s `:terminal` window. Avoiding interaction with untrusted content in this context can prevent the exploitation of this vulnerability, which leads to a denial of service.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling"
    },
    {
      "cve": "CVE-2026-54874",
      "cwe": {
        "id": "CWE-405",
        "name": "Asymmetric Resource Consumption (Amplification)"
      },
      "discovery_date": "2026-08-17T19:33:30.960000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517564"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. Receiving a DTLS (Datagram Transport Layer Security) record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a small amount of network traffic.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: excessive memory use buffering DTLS records for a future epoch",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to send a DTLS record for a future epoch while the handshake is in progress. This can cause excessive consumption of memory, eventually resulting in a denial of service. However, the retained memory is limited to 1.7MB per connection and the limit on simultaneous connections can prevent successful exploitation. For these reasons, this vulnerability has been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54874"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517564",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517564"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54874",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54874"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54874",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54874"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: excessive memory use buffering DTLS records for a future epoch"
    },
    {
      "cve": "CVE-2026-55892",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-25T16:01:52.997166+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492975"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor\u0027s memory and causes it to crash. This leads to a Denial of Service (DoS), making the editor unavailable to the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Denial of Service via crafted spell file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Vim\u0027s spell file handling. The dump_prefixes() function in src/spell.c does not validate the depth of the prefix trie against the size of fixed-size stack arrays, allowing a crafted .spl file to cause a stack out-of-bounds write and crash. Red Hat ships Vim in all RHEL versions and OpenShift CoreOS. Exploitation requires a user to load a malicious spell file and run :spelldump or spelling completion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55892"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492975"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55892"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f",
          "url": "https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0662",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0662"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h"
        }
      ],
      "release_date": "2026-06-25T15:32:41.238000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Do not load untrusted spell files (.spl) from unknown sources. Avoid using :spelldump with spell files of unknown provenance.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Denial of Service via crafted spell file"
    },
    {
      "cve": "CVE-2026-56132",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-06-19T05:01:06.414856+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490669"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libexpat, a library used for parsing XML data. An attacker could exploit a heap-based buffer overflow, a type of memory error, by providing specially crafted XML input. This vulnerability occurs when the library mishandles memory reallocation while processing XML, particularly when multiple parsers share data. Successful exploitation could allow the attacker to execute arbitrary code, access sensitive information, or cause the application to crash, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56132"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490669",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490669"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56132",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56132"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56132",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56132"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/1272",
          "url": "https://github.com/libexpat/libexpat/pull/1272"
        }
      ],
      "release_date": "2026-06-19T03:00:42.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow"
    },
    {
      "cve": "CVE-2026-56392",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-24T09:01:08.479352+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2506694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A Moderate impact heap-based buffer overflow flaw was found in the `unexpand` utility of GNU coreutils. This vulnerability arises from an integer overflow when processing unusually large tab stop values, leading to an undersized buffer. A local attacker could exploit this by providing crafted input, causing the utility to crash and potentially leading to a denial of service or arbitrary memory manipulation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "RHBZ#2506694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56392",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "https://cert.pl/en/posts/2026/07/CVE-2026-56391",
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391"
        },
        {
          "category": "external",
          "summary": "https://git.savannah.gnu.org/cgit/coreutils.git/",
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/"
        },
        {
          "category": "external",
          "summary": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
        }
      ],
      "release_date": "2026-07-24T07:44:54.885000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values"
    },
    {
      "cve": "CVE-2026-59857",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-09T23:01:27.257331+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498863"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in Vim\u0027s spell_soundfold_sal() function allows an attacker to corrupt memory and crash the editor (Denial of Service) by supplying a specially crafted word during spell sound-folding.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact flaw in Vim\u0027s spell sound-folding feature can lead to a denial of service. A local attacker could provide a specially crafted word, causing an out-of-bounds write and crashing the editor. This vulnerability primarily affects interactive users of the Vim text editor.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59857"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498863",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498863"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59857",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59857"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59857",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59857"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30",
          "url": "https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2"
        }
      ],
      "release_date": "2026-07-09T22:34:54.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "This vulnerability can be mitigated by preventing Vim from automatically applying editor configurations embedded in files.\nAdd the following line to the global /etc/vimrc or local ~/.vimrc configuration file:\nset nomodeline",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding"
    },
    {
      "cve": "CVE-2026-63072",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-17T19:24:54.673000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: heap buffer overflow in CMS key unwrapping",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply a crafted CMS message to be decrypted in an application by CMS_decrypt(). The out-of-bounds write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the memory allocation, causing memory corruption, but the impact is limited to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: heap buffer overflow in CMS key unwrapping"
    },
    {
      "cve": "CVE-2026-63073",
      "cwe": {
        "id": "CWE-134",
        "name": "Use of Externally-Controlled Format String"
      },
      "discovery_date": "2026-08-17T19:42:56.692000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517565"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A malicious CMP (Certificate Management Protocol) endpoint can send an unexpected distinguished name (DN) directly as the format string argument to ERR_raise_data(), causing the application to dereference and write to unrelated stack contents. This can lead to a crash in the CMP client, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: untrusted sender DN used as format string in CMP response validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Applications acting as a CMP client connecting to a malicious or intercepted CMP server are vulnerable to this issue, limiting its exposure. Also, the CMP client needs to enforce an expected sender or use a pinned server certificate whose subject becomes the default expected sender. This flaw can cause the application to dereference and write to unrelated stack contents, leading to a crash in the CMP client and resulting in a denial of service. There is no controlled memory write, arbitrary-address read or path to code execution. For these reasons, this vulnerability has been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63073"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517565",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517565"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63073",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63073"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63073",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63073"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: untrusted sender DN used as format string in CMP response validation"
    },
    {
      "cve": "CVE-2026-63074",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-17T19:47:06.273000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517566"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. The CMP (Certificate Management Protocol) implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra certificates to cause memory exhaustion, eventually resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: CMP indefinite cache growth of ExtraCerts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to repeatedly send invalid messages containing additional certificates to a CMP server. However, this issue only affects CMP servers with long-lived context objects. This can grow the extra certificates cache and cause excessive memory consumption, eventually resulting in a denial of service. For these reasons, this vulnerability has been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63074"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517566",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517566"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63074",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63074"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63074",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63074"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: CMP indefinite cache growth of ExtraCerts"
    },
    {
      "cve": "CVE-2026-63075",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-17T19:50:01.587000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517570"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory exhaustion, eventually resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: QUIC ACK-only packet retention can cause memory exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to complete a QUIC handshake and repeatedly send ack-eliciting packets while not acknowledging ACK-only responses. This causes the QUIC implementation to retain metadata for ACK-only responses for the lifetime of a connection, leading to excessive memory consumption, eventually resulting in a denial of service with no other security impact. For these reasons, this vulnerability has been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63075"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517570",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517570"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63075",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63075"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63075",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63075"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T16:05:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: QUIC ACK-only packet retention can cause memory exhaustion"
    },
    {
      "cve": "CVE-2026-63076",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-17T19:30:30.087000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517561"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to supply a crafted CMP message to an application acting as a CMP server or client. Server applications need to be configured to accept PBM-protected messages, and client applications need to communicate with a malicious or intercepted CMP server. The missing type check causes an invalid pointer dereference, resulting in a denial of service. There is no memory disclosure, no controlled memory write and no path to code execution. For these reasons, this vulnerability has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517561",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517561"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg"
    },
    {
      "cve": "CVE-2026-73072",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-11T15:41:15.596551+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514037"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Heap buffer overflow allows arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A local attacker can exploit an Important heap buffer overflow in Vim to execute arbitrary code by tricking a user into loading a malicious spell file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514037",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514037"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a",
          "url": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0846",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0846"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64"
        }
      ],
      "release_date": "2026-08-11T15:31:35.331000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "If spell checking is unused, disable it with set nospell in ~/.vimrc and do not set spelllang. If spell is required, load only trusted .spl files from Vim\u2019s spell directories and do not place untrusted spell files on runtimepath. Additionally, consider disabling modelines (set nomodeline in ~/.vimrc) to prevent untrusted text files from automatically overriding these settings when opened.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Heap buffer overflow allows arbitrary code execution"
    },
    {
      "cve": "CVE-2026-73076",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-11T15:41:02.894650+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514034"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary command execution via crafted vimball",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Vim where a crafted vimball can lead to arbitrary command execution. The flaw allows an attacker to embed malicious commands within a `.VimballRecord` file, which are then executed with user privileges during a later, unrelated vimball installation or removal. This extends the impact of processing untrusted vimball files beyond the initial installation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73076"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514034",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514034"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452",
          "url": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2"
        }
      ],
      "release_date": "2026-08-11T15:37:59.894000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "Avoid installing or removing vimballs from untrusted sources. This vulnerability relies on a user processing a malicious vimball, which then injects commands that are executed during a subsequent vimball operation. Exercise caution when handling vimball files from unknown or unverified origins.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary command execution via crafted vimball"
    },
    {
      "cve": "CVE-2026-73077",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-11T16:11:25.535913+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514065"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Vim\u0027s shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Vim\u0027s shell plugins allows full system compromise in Red Hat environments if a user selects crafted text in Visual mode and triggers a keyword lookup. This does not affect RHEL 8 and older versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73077"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514065",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514065"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73077",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73077"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e",
          "url": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2"
        }
      ],
      "release_date": "2026-08-11T15:39:24.579000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users can disable the `keywordprg` option for shell script filetypes. This prevents Vim from executing external commands via the `K` command with potentially untrusted input. Create or edit the following files in your Vim configuration directory:\n\n- `~/.vim/after/ftplugin/sh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/zsh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/ps1.vim`: `setlocal keywordprg=`\n\nThis change takes effect the next time a shell script is opened in Vim.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling"
    },
    {
      "cve": "CVE-2026-73078",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2026-08-11T16:10:59.827742+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514058"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Vim\u0027s netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Vim\u0027s `netrw` plugin allows for arbitrary command execution in GUI Vim. By crafting a malicious directory path, an attacker could exploit improper neutralization of special characters when the path is browsed or bookmarked, leading to command injection. This issue specifically impacts GUI installations and requires user interaction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
        ],
        "known_not_affected": [
          "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73078"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514058",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514058"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73078",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73078"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69",
          "url": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2"
        }
      ],
      "release_date": "2026-08-11T15:41:08.048000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T10:07:58+00:00",
          "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:67956"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid browsing or bookmarking untrusted or maliciously crafted directory paths within GUI Vim. Users should exercise caution when interacting with `netrw` menu entries derived from external or untrusted sources.",
          "product_ids": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:1d39c59219055e1ebf4b62694a1d95b61733d543bcdf21bfd00a37a5f7bfd361_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:4cd9948823c36de5395d4da310fb2c0fab96129c24c0d156ee844d046be8eeaa_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:ff9abb0abb666e8f0feb0ea2f5bfaa0fa5711f8271334fa894cedfd1b6ef02ad_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:bb76e35f5208b23e3316038d06a2e418800e9c1a628d53dbe7c191f6ee7f1031_amd64",
            "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:4598bbf0e99024bf6253fcc4cb4d6c85f97990813aef6d46564f02f7cecae743_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.