RHSA-2026:71603
Vulnerability from csaf_redhat - Published: 2026-09-24 11:59 - Updated: 2026-09-28 15:19Summary
Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
Severity
Important
Notes
Topic: The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.
Details: Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.
This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PostgreSQL psql. During the `COPY FROM STDIN` operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation requires the attacker to control both the server and the data being copied, or to leverage a coincidental error while controlling only the data.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server.
7.2 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.
8.1 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of `Proxy-Authorization` headers to an incorrect proxy, potentially exposing sensitive authentication information to an unauthorized entity. This is an information disclosure vulnerability.
7.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, where only the private key (with no certificate) is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. This issue results in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Low
A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could potentially allow an attacker to execute arbitrary code as the operating system user running the database.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the operating system user running the database.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain unauthorized insight into system memory.
8.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A heap buffer overflow flaw was found in the PostgreSQL to_char(timestamptz) function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead to unauthorized access and control over the database system.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system user running the database.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes (0x0 and 0x1) to server memory, which may lead to unknown impacts.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A SQL injection flaw in PostgreSQL's EXTRACT() expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pg_dump or psql inspect or export the object.
8.0 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the `levenshtein()` or `levenshtein_less_equal()` SQL functions. This allows the user to execute arbitrary code as the operating system user running the database, potentially leading to full system compromise.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful exploitation could lead to a complete compromise of the database system.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pg_dump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim processes this manipulated dump, the injected code executes with the privileges of the operating system account running the psql client.
8.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Moderate
A flaw was found in PostgreSQL pg_dump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating system user running pg_dump.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial of service.
4.4 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Moderate
A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.
5.0 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Moderate
A flaw was found in OpenSSL. Receiving a DTLS (Datagram Transport Layer Security) record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a small amount of network traffic.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Low
A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash. This leads to a Denial of Service (DoS), making the editor unavailable to the user.
5.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Moderate
A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.
4.4 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Moderate
An out-of-bounds write vulnerability in Vim's spell_soundfold_sal() function allows an attacker to corrupt memory and crash the editor (Denial of Service) by supplying a specially crafted word during spell sound-folding.
5.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Moderate
A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.
5.4 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59995
Known not affected
3 products, the same list as for
CVE-2026-59995
Threats
Impact
Important
A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Moderate
A flaw was found in OpenSSL. A malicious CMP (Certificate Management Protocol) endpoint can send an unexpected distinguished name (DN) directly as the format string argument to ERR_raise_data(), causing the application to dereference and write to unrelated stack contents. This can lead to a crash in the CMP client, resulting in a denial of service.
5.9 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Low
A flaw was found in OpenSSL. The CMP (Certificate Management Protocol) implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra certificates to cause memory exhaustion, eventually resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Low
A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory exhaustion, eventually resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Low
A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-14456
Known not affected
2 products, the same list as for
CVE-2026-14456
Threats
Impact
Moderate
A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP (Hypertext Transfer Protocol) trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers, causing an upstream proxy and the Libevent application to interpret different effective headers. This can lead to header smuggling, authorization bypass, proxy-header spoofing, or cache poisoning.
6.5 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Moderate
A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the `evbuffer_add_buffer_reference` function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or crash the application.
6.6 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Moderate
A flaw was found in libevent. The evhttp parser in libevent's http.c component inconsistently handles HTTP Transfer-Encoding headers and chunked framing. This inconsistency allows an unauthenticated remote attacker to desynchronize request boundaries when libevent is used behind a proxy. Successful exploitation could lead to request smuggling, potentially bypassing access controls or poisoning caches.
7.7 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in Libevent, an event notification library. A remote attacker could exploit an out-of-bounds read vulnerability in the `decode_tag_internal()` function by sending specially crafted, attacker-controlled tagged RPC (Remote Procedure Call) data. This could lead to a denial of service, causing the process that decodes the data to crash.
7.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in Libevent. An incorrect integer conversion in the `evtag_unmarshal_header` function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in libevent. The evhttp_decode_uri_internal function in http.c decodes percent-encoded %00 bytes into literal NUL characters without rejecting them, allowing an attacker to craft a URI such as /admin/secret%00.jpg where extension-based access checks see .jpg but the server processes /admin/secret, bypassing path-based access controls. Additionally, evhttp_header_is_valid_value accepts obsolete HTTP header line folding (CRLF followed by SP/HT), which RFC 9112 states new implementations should reject, creating a header injection vector in proxy chains where the frontend rejects obs-fold but libevent accepts it. This could lead to access control bypass, header injection, or request smuggling.
7.7 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the `dnsname_to_labels` function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the process, resulting in a denial of service or potential information disclosure and integrity impact.
8.6 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the `bufferevent_socket_set_conn_address_` function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AF_UNIX listener, an attacker can overwrite critical heap data, leading to memory corruption and potentially full control over the affected system. This can severely impact the confidentiality, integrity, and availability of data and services.
8.4 (High)
Affected products
Fixed
5 products, the same list as for
CVE-2026-8458
Threats
Impact
Important
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.
7.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A vulnerability in Vim's shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.
7.3 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-6464
Known not affected
4 products, the same list as for
CVE-2026-6464
Threats
Impact
Important
A flaw was found in OpenSSH's `ssh-agent` component. A misinteraction between agent locking and the `session-bind@openssh.com` extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS#11 tokens or utilize keys with destination restrictions, bypassing intended security controls.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
2 products, the same list as for
CVE-2026-59995
Known not affected
3 products, the same list as for
CVE-2026-59995
Threats
Impact
Low
A flaw was found in OpenSSH. A use-after-free vulnerability exists in the `ssh` client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A remote attacker with high attack complexity could potentially exploit this to achieve low impact on confidentiality and integrity.
5.6 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59995
Known not affected
3 products, the same list as for
CVE-2026-59995
Threats
Impact
Moderate
A flaw was found in OpenSSH's `sshd` component. The `restrict` keyword, designed to limit tunnel forwarding within the `authorized_keys` file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to unauthorized network access or resource usage through tunnels.
5.4 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59995
Known not affected
3 products, the same list as for
CVE-2026-59995
Threats
Impact
Moderate
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19654
Known not affected
4 products, the same list as for
CVE-2026-19654
Threats
Impact
Important
A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the `execveat` system call in ptrace-based intercept mode. By directly calling `execveat` or `fexecve`, an attacker can execute programs that would otherwise be denied, thereby circumventing policy enforcement and logging mechanisms.
7.8 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59995
Known not affected
3 products, the same list as for
CVE-2026-59995
Threats
Impact
Important
References
351 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.\nThis release updates to the latest version.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:71603",
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "external",
"summary": "https://access.redhat.com/products/red-hat-update-infrastructure",
"url": "https://access.redhat.com/products/red-hat-update-infrastructure"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14456",
"url": "https://access.redhat.com/security/cve/CVE-2026-14456"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14457",
"url": "https://access.redhat.com/security/cve/CVE-2026-14457"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14662",
"url": "https://access.redhat.com/security/cve/CVE-2026-14662"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14664",
"url": "https://access.redhat.com/security/cve/CVE-2026-14664"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14668",
"url": "https://access.redhat.com/security/cve/CVE-2026-14668"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14669",
"url": "https://access.redhat.com/security/cve/CVE-2026-14669"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14670",
"url": "https://access.redhat.com/security/cve/CVE-2026-14670"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14671",
"url": "https://access.redhat.com/security/cve/CVE-2026-14671"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14677",
"url": "https://access.redhat.com/security/cve/CVE-2026-14677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14679",
"url": "https://access.redhat.com/security/cve/CVE-2026-14679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14680",
"url": "https://access.redhat.com/security/cve/CVE-2026-14680"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15741",
"url": "https://access.redhat.com/security/cve/CVE-2026-15741"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15742",
"url": "https://access.redhat.com/security/cve/CVE-2026-15742"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16239",
"url": "https://access.redhat.com/security/cve/CVE-2026-16239"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18408",
"url": "https://access.redhat.com/security/cve/CVE-2026-18408"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18798",
"url": "https://access.redhat.com/security/cve/CVE-2026-18798"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19385",
"url": "https://access.redhat.com/security/cve/CVE-2026-19385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19654",
"url": "https://access.redhat.com/security/cve/CVE-2026-19654"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28420",
"url": "https://access.redhat.com/security/cve/CVE-2026-28420"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-52859",
"url": "https://access.redhat.com/security/cve/CVE-2026-52859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54874",
"url": "https://access.redhat.com/security/cve/CVE-2026-54874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55892",
"url": "https://access.redhat.com/security/cve/CVE-2026-55892"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56392",
"url": "https://access.redhat.com/security/cve/CVE-2026-56392"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59857",
"url": "https://access.redhat.com/security/cve/CVE-2026-59857"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59995",
"url": "https://access.redhat.com/security/cve/CVE-2026-59995"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59999",
"url": "https://access.redhat.com/security/cve/CVE-2026-59999"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63072",
"url": "https://access.redhat.com/security/cve/CVE-2026-63072"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63073",
"url": "https://access.redhat.com/security/cve/CVE-2026-63073"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63074",
"url": "https://access.redhat.com/security/cve/CVE-2026-63074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63075",
"url": "https://access.redhat.com/security/cve/CVE-2026-63075"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63076",
"url": "https://access.redhat.com/security/cve/CVE-2026-63076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63379",
"url": "https://access.redhat.com/security/cve/CVE-2026-63379"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63381",
"url": "https://access.redhat.com/security/cve/CVE-2026-63381"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63382",
"url": "https://access.redhat.com/security/cve/CVE-2026-63382"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63383",
"url": "https://access.redhat.com/security/cve/CVE-2026-63383"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63384",
"url": "https://access.redhat.com/security/cve/CVE-2026-63384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63385",
"url": "https://access.redhat.com/security/cve/CVE-2026-63385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63387",
"url": "https://access.redhat.com/security/cve/CVE-2026-63387"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63388",
"url": "https://access.redhat.com/security/cve/CVE-2026-63388"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6464",
"url": "https://access.redhat.com/security/cve/CVE-2026-6464"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6471",
"url": "https://access.redhat.com/security/cve/CVE-2026-6471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73072",
"url": "https://access.redhat.com/security/cve/CVE-2026-73072"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73076",
"url": "https://access.redhat.com/security/cve/CVE-2026-73076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73077",
"url": "https://access.redhat.com/security/cve/CVE-2026-73077"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73078",
"url": "https://access.redhat.com/security/cve/CVE-2026-73078"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73281",
"url": "https://access.redhat.com/security/cve/CVE-2026-73281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73282",
"url": "https://access.redhat.com/security/cve/CVE-2026-73282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73283",
"url": "https://access.redhat.com/security/cve/CVE-2026-73283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-78002",
"url": "https://access.redhat.com/security/cve/CVE-2026-78002"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-82474",
"url": "https://access.redhat.com/security/cve/CVE-2026-82474"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-8458",
"url": "https://access.redhat.com/security/cve/CVE-2026-8458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-8927",
"url": "https://access.redhat.com/security/cve/CVE-2026-8927"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5",
"url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71603.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update",
"tracking": {
"current_release_date": "2026-09-28T15:19:40+00:00",
"generator": {
"date": "2026-09-28T15:19:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:71603",
"initial_release_date": "2026-09-24T11:59:15+00:00",
"revision_history": [
{
"date": "2026-09-24T11:59:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-24T11:59:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-28T15:19:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Update Infrastructure 5",
"product": {
"name": "Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhui:5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Update Infrastructure"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"product_id": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-kubernetes-rhel9@sha256%3Ab747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-kubernetes-rhel9\u0026tag=1790241897"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"product_id": "registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-rhel9@sha256%3Ae47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-rhel9\u0026tag=1790241954"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"product": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"product_id": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/haproxy-rhel9@sha256%3A55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/haproxy-rhel9\u0026tag=1790241900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"product": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"product_id": "registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/installer-rhel9@sha256%3Ad48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/installer-rhel9\u0026tag=1790241922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64",
"product": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64",
"product_id": "registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhua-rhel9@sha256%3Ad20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/rhua-rhel9\u0026tag=1790242004"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
},
"product_reference": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
},
"product_reference": "registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
},
"product_reference": "registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6464",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2026-08-13T13:21:12.187888+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515306"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL psql. During the `COPY FROM STDIN` operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation requires the attacker to control both the server and the data being copied, or to leverage a coincidental error while controlling only the data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the PostgreSQL psql client that could lead to arbitrary command execution. When using `COPY FROM STDIN`, untrusted data can be processed as psql commands if an error injection causes the command to fail prematurely. Exploitation requires an attacker to control both the PostgreSQL server and the data rows, or to leverage a coincidental error, which significantly limits the attack surface in typical Red Hat deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6464"
},
{
"category": "external",
"summary": "RHBZ#2515306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6464"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6464",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6464"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6464/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6464/"
}
],
"release_date": "2026-08-13T13:00:16.158000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN"
},
{
"cve": "CVE-2026-6471",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-08-13T13:21:38.056528+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515307"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. Missing authorization in PostgreSQL\u0027s logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in PostgreSQL\u0027s logical decoding feature allows a non-superuser with the REPLICATION privilege to execute arbitrary code. Exploitation requires an attacker to already have significant access to the database, specifically the REPLICATION role, which is not granted by default to typical users, thus reducing the overall risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6471"
},
{
"category": "external",
"summary": "RHBZ#2515307",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515307"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6471",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6471"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-6471/",
"url": "https://www.postgresql.org/support/security/CVE-2026-6471/"
}
],
"release_date": "2026-08-13T13:00:18.050000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that the REPLICATION privilege is granted only to highly trusted database superusers. Regularly review user privileges to confirm that non-superuser accounts do not possess the REPLICATION privilege unless absolutely necessary and their activities are closely monitored. If logical decoding is not actively used, consider disabling it to further reduce the attack surface, though specific configuration steps for disabling logical decoding are beyond the scope of this mitigation.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin"
},
{
"cve": "CVE-2026-8458",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-07-03T07:01:30.042181+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Unauthorized connection reuse due to a logical error",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in libcurl where a logical error in connection pooling can lead to unauthorized connection reuse. When an application uses Negotiate authentication with different service names on the same hostname and port, libcurl might incorrectly reuse an existing authenticated connection for an unintended service. This could result in information disclosure or unauthorized access to resources, bypassing intended service isolation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8458"
},
{
"category": "external",
"summary": "RHBZ#2496764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8458"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8458.html",
"url": "https://curl.se/docs/CVE-2026-8458.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8458.json",
"url": "https://curl.se/docs/CVE-2026-8458.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3721183",
"url": "https://hackerone.com/reports/3721183"
}
],
"release_date": "2026-07-03T06:14:42.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: libcurl: Unauthorized connection reuse due to a logical error"
},
{
"cve": "CVE-2026-8927",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-03T07:01:44.730187+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496769"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of `Proxy-Authorization` headers to an incorrect proxy, potentially exposing sensitive authentication information to an unauthorized entity. This is an information disclosure vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Information disclosure due to uncleared proxy authentication state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure vulnerability in libcurl arises when a handle is reused for sequential transfers with environment-variable proxy configurations, failing to clear the proxy authentication state. This oversight can lead to `Proxy-Authorization` headers being inadvertently sent to an incorrect proxy, potentially exposing sensitive authentication information in Red Hat environments utilizing multiple proxy configurations. This flaw leads only to a confidentiality impact. There has been no observed integrity impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8927"
},
{
"category": "external",
"summary": "RHBZ#2496769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496769"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8927",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8927"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8927.html",
"url": "https://curl.se/docs/CVE-2026-8927.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8927.json",
"url": "https://curl.se/docs/CVE-2026-8927.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3744543",
"url": "https://hackerone.com/reports/3744543"
}
],
"release_date": "2026-07-03T06:16:06.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing libcurl should avoid reusing handles when switching between different proxy configurations. This operational control prevents the unintended leakage of `Proxy-Authorization` headers to incorrect proxies.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Information disclosure due to uncleared proxy authentication state"
},
{
"cve": "CVE-2026-14456",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T14:21:24.109249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515348"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 9.8+, 10.2+, Red Hat Hardened Images, RHIVOS 2, and OpenShift 4.22 ship OpenSSL 3.5.x which includes the QUIC server implementation affected by this flaw. Earlier RHEL versions ship OpenSSL 3.2.x or below, which do not include the QUIC server feature and are not affected. The FIPS module is not affected as the QUIC implementation is outside the OpenSSL FIPS module boundary. Applications must explicitly enable the QUIC server listener to be vulnerable; simply having OpenSSL 3.5 installed does not expose the flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14456"
},
{
"category": "external",
"summary": "RHBZ#2515348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515348"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14456"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",
"url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b",
"url": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139",
"url": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260813.txt",
"url": "https://openssl-library.org/news/secadv/20260813.txt"
}
],
"release_date": "2026-08-13T13:55:52.370000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Option 1: Rate-limit or Firewall Inbound QUIC (UDP 443) [Goal: Slow or block QUIC Initial packets before they reach the vulnerable listener.]\n\nA. Confirm QUIC Exposure - Check if any service is listening on UDP 443:\n~~~\n$ ss -ulnp | grep \u0027:443\u0027\n# or\n$ sudo lsof -iUDP:443 -n -P\n~~~\n\nNote: If no service is listening on UDP 443, this CVE does not apply (TCP 443 is unaffected).\n\nB. Restrict Access to UDP 443 ( Default-deny UDP 443 and allow only trusted networks:)\n~~~\n$ sudo firewall-cmd --permanent --remove-service=quic 2\u003e/dev/null\n$ sudo firewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" source address=\"10.0.0.0/8\" port port=\"443\" protocol=\"udp\" accept\u0027\n$ sudo firewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" port port=\"443\" protocol=\"udp\" drop\u0027\n$ sudo firewall-cmd --reload\n~~~\n\nC. Verify - Confirm the restriction by testing from an external host (the connection should fail or be throttled):\n~~~\n$ nc -u -v YOUR_HOST 443\n~~~\n\nOption 2: Disable QUIC Server\n\nIf QUIC/HTTP3 is not required, remove the vulnerable code path entirely and use TLS/TCP instead.\n\nRecommended Mitigation Priority\nPriority : Action\n1.Confirm UDP 443 QUIC listener exists and OpenSSL version is in affected range\n2.Block or rate-limit UDP 443 at firewall/edge (immediate)\n3.Disable QUIC/HTTP3 on the service if not needed\n4.Upgrade OpenSSL to fixed release when available\n5.Application owners: set SSL_VALUE_QUIC_MAX_PENDING_CONNS if default 256 is too high",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server"
},
{
"cve": "CVE-2026-14457",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-08-17T19:33:23.332000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, where only the private key (with no certificate) is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted \"signature_algorithms_cert\" TLS extension. This issue results in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: RPK server signature algorithm selection can dereference a missing certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Server or client configurations with RPKs (RFC7250 Raw Public Keys) enabled, where only the private key (with no associated certificate) is configured, are vulnerable to this issue. However, key-only RPK configurations are not considered a best practice, limiting the exposure of this flaw. This issue can cause a NULL pointer dereference, resulting in a denial of service due to an application abort. There is no data disclosure or command execution. For these reasons, this vulnerability has been rated with a low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14457"
},
{
"category": "external",
"summary": "RHBZ#2517562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14457",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14457"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14457",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14457"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: RPK server signature algorithm selection can dereference a missing certificate"
},
{
"cve": "CVE-2026-14662",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-13T13:20:57.973795+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515302"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could potentially allow an attacker to execute arbitrary code as the operating system user running the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in PostgreSQL where an unprivileged database user could achieve arbitrary code execution due to an integer wraparound in tsvector and tsquery functions. While direct exploitation by application users is considered unlikely as these functions are typically used by application logic, the flaw could still be leveraged in specific scenarios where crafted large inputs are processed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14662"
},
{
"category": "external",
"summary": "RHBZ#2515302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515302"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14662",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14662"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14662",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14662"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14662/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14662/"
}
],
"release_date": "2026-08-13T13:00:01.726000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions"
},
{
"cve": "CVE-2026-14664",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-08-13T13:22:03.322433+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515311"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the operating system user running the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. A heap buffer overflow in the PostgreSQL regular expression engine allows an authenticated query author to execute arbitrary code as the database operating system user. This can lead to a complete compromise of the database server through specially crafted input that bypasses encoding validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14664"
},
{
"category": "external",
"summary": "RHBZ#2515311",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515311"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14664",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14664"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14664",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14664"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14664/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14664/"
}
],
"release_date": "2026-08-13T13:00:03.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Restrict PostgreSQL to trusted hosts and bind only required interfaces. Do not grant CONNECT to untrusted roles; any session that can run SQL can call regexp_match / regexp_matches / regexp_split_to_*. If those functions are unused, REVOKE EXECUTE on them from PUBLIC.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp"
},
{
"cve": "CVE-2026-14668",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-08-13T13:23:22.898631+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515326"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain unauthorized insight into system memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important-rated information disclosure vulnerability in PostgreSQL allows an authenticated user with object creation privileges to read arbitrary memory spans. By exploiting a type confusion flaw within the ctid selectivity estimator, an attacker can view memory-derived calculations to recover sensitive data. Exploitation is limited to users possessing object creation rights",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14668"
},
{
"category": "external",
"summary": "RHBZ#2515326",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515326"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14668",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14668"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14668",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14668"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14668/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14668/"
}
],
"release_date": "2026-08-13T13:00:04.405000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, administrators should enforce the principle of least privilege by revoking CREATE permissions on all databases from untrusted users. Because exploiting this flaw strictly requires the attacker to be an object creator, removing this privilege effectively neutralizes the threat. Ensure only highly trusted administrative roles can create database objects",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator"
},
{
"cve": "CVE-2026-14669",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-08-13T13:22:41.824137+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515317"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow flaw was found in the PostgreSQL to_char(timestamptz) function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database\u0027s operating system user, potentially resulting in complete system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap buffer overflow in PostgreSQL\u0027s to_char(timestamptz) function allows an attacker to execute arbitrary code as the database system user by supplying a long POSIX timezone abbreviation. This risk is highest where untrusted users can modify timezone settings.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14669"
},
{
"category": "external",
"summary": "RHBZ#2515317",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515317"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14669"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14669",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14669"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14669/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14669/"
}
],
"release_date": "2026-08-13T13:00:04.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To reduce the risk of exploitation, ensure that only trusted users have privileges to modify timezone settings within the PostgreSQL database. Additionally, restrict network access to the PostgreSQL server to only trusted clients and applications through firewall rules, limiting the attack surface for remote exploitation.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation"
},
{
"cve": "CVE-2026-14670",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-08-13T13:23:32.202372+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515325"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead to unauthorized access and control over the database system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PostgreSQL\u0027s plperl component allows a function owner to achieve arbitrary code execution as the database operating system user. By crafting a malicious function body, an attacker with low privileges can exploit a heap buffer overflow, leading to full compromise of the database system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14670"
},
{
"category": "external",
"summary": "RHBZ#2515325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515325"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14670",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14670"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14670",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14670"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14670/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14670/"
}
],
"release_date": "2026-08-13T13:00:05.626000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Disable the plperl procedural language if it is not actively required by executing DROP LANGUAGE plperl; on affected databases. Alternatively, restrict access by revoking USAGE privileges on plperl from untrusted roles. These actions prevent the execution of crafted plperl functions, mitigating the risk(a database restart may be required to clear active sessions).",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow"
},
{
"cve": "CVE-2026-14671",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-08-13T13:23:10.662262+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515322"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. A type confusion vulnerability in the \u0027refint\u0027 module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in \u0027refint\u0027 module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important-rated type confusion vulnerability in PostgreSQL\u0027s refint module allows an authenticated user with object creation privileges to execute arbitrary code. Successful exploitation results in a complete compromise of the database server, as the code executes under the context of the database\u0027s operating system user.\"",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14671"
},
{
"category": "external",
"summary": "RHBZ#2515322",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515322"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14671"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14671",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14671"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14671/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14671/"
}
],
"release_date": "2026-08-13T13:00:18.697000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, administrators should avoid installing the refint module and remove it if it is currently deployed by executing DROP EXTENSION refint; as a database superuser. Additionally, enforcing the principle of least privilege by revoking CREATE permissions on databases from untrusted users prevents them from creating the malicious objects necessary to exploit this flaw.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in \u0027refint\u0027 module"
},
{
"cve": "CVE-2026-14677",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-13T13:22:34.088665+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515313"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system user running the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PostgreSQL\u0027s 32-bit pltcl and plperl extensions allows an authenticated object creator to achieve arbitrary code execution as the database operating system user. The flaw stems from an integer wraparound, leading to out-of-bounds writes when processing crafted function bodies. Exploitation requires specific conditions related to 32-bit environments and the ability to create objects within the database.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14677"
},
{
"category": "external",
"summary": "RHBZ#2515313",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515313"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14677"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14677/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14677/"
}
],
"release_date": "2026-08-13T13:00:08.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable or remove the `pltcl` and `plperl` extensions if they are not essential for your PostgreSQL deployment, particularly in 32-bit environments. This can be done by revoking `CREATE` privilege on `LANGUAGE pltcl` and `LANGUAGE plperl` from untrusted users. If these extensions are necessary, ensure that only trusted users possess object creation privileges within the database.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl"
},
{
"cve": "CVE-2026-14679",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2026-08-13T13:23:39.637833+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515321"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes (0x0 and 0x1) to server memory, which may lead to unknown impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important PostgreSQL stack buffer overflow allows an authenticated object creator to trigger unknown impacts by manipulating OUT parameter counts. While requiring existing database privileges, successful exploitation could lead to service disruption and minor data integrity issues, elevating the risk beyond a Moderate classification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14679"
},
{
"category": "external",
"summary": "RHBZ#2515321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515321"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14679"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14679/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14679/"
}
],
"release_date": "2026-08-13T13:00:09.371000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation"
},
{
"cve": "CVE-2026-14680",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-08-13T13:21:57.012683+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515308"
}
],
"notes": [
{
"category": "description",
"text": "A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database\u0027s operating system user by calling functions with mishandled \"internal\" data type arguments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via type confusion with \"internal\" arguments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where any authenticated PostgreSQL user can achieve arbitrary code execution as the operating system user running the database. This type confusion flaw bypasses intended security boundaries for \u0027internal\u0027 data types, leading to a significant privilege escalation and potential compromise of the entire database server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14680"
},
{
"category": "external",
"summary": "RHBZ#2515308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515308"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14680"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-14680/",
"url": "https://www.postgresql.org/support/security/CVE-2026-14680/"
}
],
"release_date": "2026-08-13T13:00:10.037000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Restrict PostgreSQL to trusted hosts and bind only the required interfaces; use pg_hba.conf so only trusted clients can reach the port. Do not grant CONNECT (or any SQL login) to untrusted roles \u2014any session can trigger this.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion with \"internal\" arguments"
},
{
"cve": "CVE-2026-15741",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-08-13T13:24:21.781976+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515332"
}
],
"notes": [
{
"category": "description",
"text": "A SQL injection flaw in PostgreSQL\u0027s EXTRACT() expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pg_dump or psql inspect or export the object.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important-rated SQL injection vulnerability in PostgreSQL\u0027s EXTRACT() expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By crafting a hostile database object, an attacker can trigger privilege escalation when administrative tools like pg_dump or psql process the object. This poses a significant risk to environments where non-administrative users are granted object creation rights.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15741"
},
{
"category": "external",
"summary": "RHBZ#2515332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15741",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15741"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15741",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15741"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-15741/",
"url": "https://www.postgresql.org/support/security/CVE-2026-15741/"
}
],
"release_date": "2026-08-13T13:00:11.206000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, administrators should strictly limit database object creation privileges to highly trusted users. When performing backups or database introspection using pg_dump or psql, exercise caution when operating on databases that allow untrusted users to define objects,",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse"
},
{
"cve": "CVE-2026-15742",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-13T13:22:19.400516+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the `levenshtein()` or `levenshtein_less_equal()` SQL functions. This allows the user to execute arbitrary code as the operating system user running the database, potentially leading to full system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the PostgreSQL `fuzzystrmatch` extension is rated as Important. A low-privileged database user could achieve arbitrary code execution as the operating system user running the database. This risk is present only when the `fuzzystrmatch` extension is explicitly installed and utilized, as it is not enabled by default in Red Hat deployments. The flaw stems from an integer wraparound when processing extreme inputs to specific SQL functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15742"
},
{
"category": "external",
"summary": "RHBZ#2515314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15742",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15742"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15742",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15742"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-15742/",
"url": "https://www.postgresql.org/support/security/CVE-2026-15742/"
}
],
"release_date": "2026-08-13T13:00:11.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, consider disabling the `fuzzystrmatch` extension within PostgreSQL if its functionality is not essential. Alternatively, the `postgresql-fuzzystrmatch` package can be removed. Disabling or removing the extension may affect applications that rely on the `levenshtein()` or `levenshtein_less_equal()` functions. A database service restart may be required for these changes to take effect.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound"
},
{
"cve": "CVE-2026-16239",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-08-13T13:22:28.331979+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515316"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the \u0027portal\u0027/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful exploitation could lead to a complete compromise of the database system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in PostgreSQL. A type confusion flaw in the cursor lifecycle allows a low-privileged authenticated database user to execute arbitrary code as the operating system user running the database. This can lead to a complete compromise of the database system, making it a significant risk in typical Red Hat deployments where PostgreSQL instances are exposed to authenticated users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16239"
},
{
"category": "external",
"summary": "RHBZ#2515316",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515316"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16239"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16239",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16239"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-16239/",
"url": "https://www.postgresql.org/support/security/CVE-2026-16239/"
}
],
"release_date": "2026-08-13T13:00:13.131000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict direct database access strictly to trusted roles and minimize multi-tenant database scenarios where untrusted users can execute arbitrary SQL. Monitor database audit logs for anomalous or high-frequency cursor lifecycle activities involving unexpected CLOSE and DECLARE operations.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle"
},
{
"cve": "CVE-2026-18408",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2026-08-13T13:21:05.112091+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515303"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pg_dump export, the attacker can exploit the input expansion of the psql \\restrict meta-command. When a victim processes this manipulated dump, the injected code executes with the privileges of the operating system account running the psql client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important-rated vulnerability in PostgreSQL allows a malicious superuser on an origin server to compromise client systems during a database restore. By injecting arbitrary code into a database dump, the attacker can trigger execution when the file is processed by a victim\u0027s psql client. This runs the malicious code with the operating system privileges of the user performing the restore, effectively escalating access from the compromised database server to the client machine.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18408"
},
{
"category": "external",
"summary": "RHBZ#2515303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515303"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18408",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18408"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18408",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18408"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-18408/",
"url": "https://www.postgresql.org/support/security/CVE-2026-18408/"
}
],
"release_date": "2026-08-13T13:00:14.898000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, administrators should avoid generating or restoring pg_dump files from untrusted or public origin servers using the psql client. If restoring a plain-format dump from an unverified source is strictly necessary, manually inspect the file for unauthorized \\restrict or \\unrestrict meta-commands before execution, or isolate the restore process in a sandboxed environment",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump"
},
{
"cve": "CVE-2026-18798",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"discovery_date": "2026-08-17T19:14:03.992000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517559"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: QUIC server may trigger double free when processing INITIAL packet",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue can cause memory corruption due to the double free of the QRX object. However, there is currently no evidence it allows remote code execution, limiting the impact of this vulnerability to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18798"
},
{
"category": "external",
"summary": "RHBZ#2517559",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517559"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18798",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: QUIC server may trigger double free when processing INITIAL packet"
},
{
"cve": "CVE-2026-19385",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-08-13T13:24:39.300405+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515328"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostgreSQL pg_dump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating system user running pg_dump.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A heap buffer overflow in PostgreSQL pg_dump allows authenticated database users to execute arbitrary code. Attackers with object-creation privileges can use crafted function transform lists to run OS commands as the backup user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19385"
},
{
"category": "external",
"summary": "RHBZ#2515328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19385"
},
{
"category": "external",
"summary": "https://www.postgresql.org/support/security/CVE-2026-19385/",
"url": "https://www.postgresql.org/support/security/CVE-2026-19385/"
}
],
"release_date": "2026-08-13T13:00:15.490000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Restrict database user privileges, particularly object creation, to trusted administrators only. Ensure that `pg_dump` operations are performed by users with the least necessary operating system privileges to limit the impact of potential code execution.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists"
},
{
"cve": "CVE-2026-19654",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-20T16:56:49.329000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502868"
}
],
"notes": [
{
"category": "description",
"text": "A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsyslog: A configuration-dependent issue in rsyslog\u0027s optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in rsyslog allows an unauthenticated peer to crash the rsyslogd deamon, resulting a a Denial-of-Service, by sending a crafted input sequence. This happens because the malicious input ends creating an invalid internal message length, which crashes the rsyslogd receiving the input. This vulnerability is only exploitable when the following conditions are met:\n\n* imptcp module is explicitly loaded\n* There\u0027s an imptcp listener using the non-default framing.delimiter.regex mode\n* The attacker is able to establish a TCP connection to the target listener\n\nAlthough this vulnerability has been rated as having an Important severity in upstream, the Red Hat Product Security team has rated it as having a MODERATE severity in supported Red Hat Products. This happens because the conditions described above are not met in default configurations of the `rsyslog` package as shipped with Red Hat Enterprise Linux Versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19654"
},
{
"category": "external",
"summary": "RHBZ#2502868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502868"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19654"
},
{
"category": "external",
"summary": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29",
"url": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29"
}
],
"release_date": "2026-07-22T10:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, users that are relying on the imptcp module can implement one of the following options:\n\n1) Remove the framing.delimiter.regex from the affected\n2) Disabled the affected `imptcp` listener or unload `imptcp` if it\u0027s not required\n3) Restrict the network access to the listener to trusted senders only",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsyslog: A configuration-dependent issue in rsyslog\u0027s optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd"
},
{
"cve": "CVE-2026-28420",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-02-27T23:02:26.039794+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim\u0027s terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28420"
},
{
"category": "external",
"summary": "RHBZ#2443484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28420",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28420"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28420",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28420"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/bb6de2105b160e729c34063",
"url": "https://github.com/vim/vim/commit/bb6de2105b160e729c34063"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0076",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0076"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg",
"url": "https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg"
}
],
"release_date": "2026-02-27T22:04:36.189000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator"
},
{
"cve": "CVE-2026-52859",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-11T19:02:24.309768+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487989"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Vim allows a local attacker to cause a denial of service. By displaying specially crafted output within a Vim `:terminal` window, an attacker can trigger an out-of-bounds write, leading to the application crashing. This primarily impacts users who interact with untrusted content or execute untrusted programs within Vim\u0027s terminal emulator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-52859"
},
{
"category": "external",
"summary": "RHBZ#2487989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487989"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-52859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-52859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19",
"url": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0565",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0565"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm",
"url": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm"
}
],
"release_date": "2026-06-11T18:33:09.886000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Users should exercise caution when opening untrusted files or executing untrusted programs within vim\u0027s `:terminal` window. Avoiding interaction with untrusted content in this context can prevent the exploitation of this vulnerability, which leads to a denial of service.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling"
},
{
"cve": "CVE-2026-54874",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2026-08-17T19:33:30.960000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517564"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. Receiving a DTLS (Datagram Transport Layer Security) record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a small amount of network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: excessive memory use buffering DTLS records for a future epoch",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to send a DTLS record for a future epoch while the handshake is in progress. This can cause excessive consumption of memory, eventually resulting in a denial of service. However, the retained memory is limited to 1.7MB per connection and the limit on simultaneous connections can prevent successful exploitation. For these reasons, this vulnerability has been rated with a low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54874"
},
{
"category": "external",
"summary": "RHBZ#2517564",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517564"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54874"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: excessive memory use buffering DTLS records for a future epoch"
},
{
"cve": "CVE-2026-55892",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-25T16:01:52.997166+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor\u0027s memory and causes it to crash. This leads to a Denial of Service (DoS), making the editor unavailable to the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of Service via crafted spell file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Vim\u0027s spell file handling. The dump_prefixes() function in src/spell.c does not validate the depth of the prefix trie against the size of fixed-size stack arrays, allowing a crafted .spl file to cause a stack out-of-bounds write and crash. Red Hat ships Vim in all RHEL versions and OpenShift CoreOS. Exploitation requires a user to load a malicious spell file and run :spelldump or spelling completion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55892"
},
{
"category": "external",
"summary": "RHBZ#2492975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55892"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55892",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55892"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f",
"url": "https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0662",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0662"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h",
"url": "https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h"
}
],
"release_date": "2026-06-25T15:32:41.238000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Do not load untrusted spell files (.spl) from unknown sources. Avoid using :spelldump with spell files of unknown provenance.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of Service via crafted spell file"
},
{
"cve": "CVE-2026-56392",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-24T09:01:08.479352+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506694"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate impact heap-based buffer overflow flaw was found in the `unexpand` utility of GNU coreutils. This vulnerability arises from an integer overflow when processing unusually large tab stop values, leading to an undersized buffer. A local attacker could exploit this by providing crafted input, causing the utility to crash and potentially leading to a denial of service or arbitrary memory manipulation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56392"
},
{
"category": "external",
"summary": "RHBZ#2506694",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506694"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56392",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56392"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/07/CVE-2026-56391",
"url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391"
},
{
"category": "external",
"summary": "https://git.savannah.gnu.org/cgit/coreutils.git/",
"url": "https://git.savannah.gnu.org/cgit/coreutils.git/"
},
{
"category": "external",
"summary": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
"url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
}
],
"release_date": "2026-07-24T07:44:54.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values"
},
{
"cve": "CVE-2026-59857",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-09T23:01:27.257331+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498863"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability in Vim\u0027s spell_soundfold_sal() function allows an attacker to corrupt memory and crash the editor (Denial of Service) by supplying a specially crafted word during spell sound-folding.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in Vim\u0027s spell sound-folding feature can lead to a denial of service. A local attacker could provide a specially crafted word, causing an out-of-bounds write and crashing the editor. This vulnerability primarily affects interactive users of the Vim text editor.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59857"
},
{
"category": "external",
"summary": "RHBZ#2498863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498863"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59857"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30",
"url": "https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2"
}
],
"release_date": "2026-07-09T22:34:54.698000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "This vulnerability can be mitigated by preventing Vim from automatically applying editor configurations embedded in files.\nAdd the following line to the global /etc/vimrc or local ~/.vimrc configuration file:\nset nomodeline",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding"
},
{
"cve": "CVE-2026-59995",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-07-08T01:01:01.518880+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the \u0027sftp server:/path .\u0027 command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59995"
},
{
"category": "external",
"summary": "RHBZ#2497927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:04:49.995000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using the `sftp server:/path .` command when connecting to untrusted or potentially malicious SFTP servers. Exercise caution and verify the authenticity of SFTP servers before initiating file transfers, especially when using commands that implicitly define the download destination, and also avoid running SFTP sessions with elevated privileges (such as root).",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location"
},
{
"cve": "CVE-2026-59999",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-07-08T01:01:55.619428+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity flaw in OpenSSH `sshd` allows `PermitTunnel=yes` to override `DisableForwarding=yes`, potentially bypassing intended security controls. In Red Hat environments where `DisableForwarding` is used to restrict SSH session capabilities, an attacker who compromises a user\u0027s session could still establish a tunnel, leading to unauthorized network access or data exfiltration. This bypass occurs even when administrators explicitly attempt to prevent forwarding, though `PermitTunnel` is not enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59999"
},
{
"category": "external",
"summary": "RHBZ#2497942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:13:08.397000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, if `DisableForwarding=yes` is set in `/etc/ssh/sshd_config` to prevent all forwarding, ensure that `PermitTunnel` is explicitly set to `no` in the same configuration file. This will enforce the intended security policy.\n\nAfter modifying `/etc/ssh/sshd_config`, restart the `sshd` service for the changes to take effect. This may temporarily interrupt active SSH sessions.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options"
},
{
"cve": "CVE-2026-63072",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-17T19:24:54.673000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517560"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: heap buffer overflow in CMS key unwrapping",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to supply a crafted CMS message to be decrypted in an application by CMS_decrypt(). The out-of-bounds write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the memory allocation, causing memory corruption, but the impact is limited to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63072"
},
{
"category": "external",
"summary": "RHBZ#2517560",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517560"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: heap buffer overflow in CMS key unwrapping"
},
{
"cve": "CVE-2026-63073",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"discovery_date": "2026-08-17T19:42:56.692000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A malicious CMP (Certificate Management Protocol) endpoint can send an unexpected distinguished name (DN) directly as the format string argument to ERR_raise_data(), causing the application to dereference and write to unrelated stack contents. This can lead to a crash in the CMP client, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: untrusted sender DN used as format string in CMP response validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Applications acting as a CMP client connecting to a malicious or intercepted CMP server are vulnerable to this issue, limiting its exposure. Also, the CMP client needs to enforce an expected sender or use a pinned server certificate whose subject becomes the default expected sender. This flaw can cause the application to dereference and write to unrelated stack contents, leading to a crash in the CMP client and resulting in a denial of service. There is no controlled memory write, arbitrary-address read or path to code execution. For these reasons, this vulnerability has been rated with a low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63073"
},
{
"category": "external",
"summary": "RHBZ#2517565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63073"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: untrusted sender DN used as format string in CMP response validation"
},
{
"cve": "CVE-2026-63074",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-17T19:47:06.273000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517566"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The CMP (Certificate Management Protocol) implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra certificates to cause memory exhaustion, eventually resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: CMP indefinite cache growth of ExtraCerts",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to repeatedly send invalid messages containing additional certificates to a CMP server. However, this issue only affects CMP servers with long-lived context objects. This can grow the extra certificates cache and cause excessive memory consumption, eventually resulting in a denial of service. For these reasons, this vulnerability has been rated with a low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63074"
},
{
"category": "external",
"summary": "RHBZ#2517566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63074"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: CMP indefinite cache growth of ExtraCerts"
},
{
"cve": "CVE-2026-63075",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-17T19:50:01.587000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517570"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory exhaustion, eventually resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: QUIC ACK-only packet retention can cause memory exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to complete a QUIC handshake and repeatedly send ack-eliciting packets while not acknowledging ACK-only responses. This causes the QUIC implementation to retain metadata for ACK-only responses for the lifetime of a connection, leading to excessive memory consumption, eventually resulting in a denial of service with no other security impact. For these reasons, this vulnerability has been rated with a low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63075"
},
{
"category": "external",
"summary": "RHBZ#2517570",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517570"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63075"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T16:05:51.415000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: QUIC ACK-only packet retention can cause memory exhaustion"
},
{
"cve": "CVE-2026-63076",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-08-17T19:30:30.087000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517561"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to supply a crafted CMP message to an application acting as a CMP server or client. Server applications need to be configured to accept PBM-protected messages, and client applications need to communicate with a malicious or intercepted CMP server. The missing type check causes an invalid pointer dereference, resulting in a denial of service. There is no memory disclosure, no controlled memory write and no path to code execution. For these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63076"
},
{
"category": "external",
"summary": "RHBZ#2517561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517561"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260825.txt",
"url": "https://openssl-library.org/news/secadv/20260825.txt"
}
],
"release_date": "2026-08-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg"
},
{
"cve": "CVE-2026-63379",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-20T18:11:26.473492+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520667"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP (Hypertext Transfer Protocol) trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers, causing an upstream proxy and the Libevent application to interpret different effective headers. This can lead to header smuggling, authorization bypass, proxy-header spoofing, or cache poisoning.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat ships libevent in multiple products including Red Hat Enterprise Linux, RHIVOS, and as part of RHCOS in OpenShift. All shipped versions are prior to the fix in 2.1.13 and are affected by this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63379"
},
{
"category": "external",
"summary": "RHBZ#2520667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63379"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63379",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63379"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/87e8e44fa774e9677b089b1a5114ee68aefa1636",
"url": "https://github.com/libevent/libevent/commit/87e8e44fa774e9677b089b1a5114ee68aefa1636"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/b847071141b3827900d536594ec9045eb0a4c485",
"url": "https://github.com/libevent/libevent/commit/b847071141b3827900d536594ec9045eb0a4c485"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6"
}
],
"release_date": "2026-08-20T17:55:00.789000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning"
},
{
"cve": "CVE-2026-63381",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-20T18:02:05.183416+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520657"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the `evbuffer_add_buffer_reference` function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or crash the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: Memory corruption due to use-after-free",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux, OpenShift (RHCOS), RHIVOS, and community products (Fedora, Hummingbird) ship affected versions of libevent.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63381"
},
{
"category": "external",
"summary": "RHBZ#2520657",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520657"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63381"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63381",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63381"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/5cb95ba2f804f8aff46f88d58391c71e1251cd1c",
"url": "https://github.com/libevent/libevent/commit/5cb95ba2f804f8aff46f88d58391c71e1251cd1c"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/9db091b04f569be3a700fa9860ef02f90b830af9",
"url": "https://github.com/libevent/libevent/commit/9db091b04f569be3a700fa9860ef02f90b830af9"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8"
}
],
"release_date": "2026-08-20T17:50:09.322000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libevent: Libevent: Memory corruption due to use-after-free"
},
{
"cve": "CVE-2026-63382",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-20T18:02:20.622823+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520660"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libevent. The evhttp parser in libevent\u0027s http.c component inconsistently handles HTTP Transfer-Encoding headers and chunked framing. This inconsistency allows an unauthenticated remote attacker to desynchronize request boundaries when libevent is used behind a proxy. Successful exploitation could lead to request smuggling, potentially bypassing access controls or poisoning caches.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: libevent: Multiple HTTP Parser Bugs Enable Request Smuggling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux, OpenShift (RHCOS), RHIVOS, and community products (Fedora, Hummingbird) ship affected versions of libevent.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63382"
},
{
"category": "external",
"summary": "RHBZ#2520660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520660"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63382"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63382",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63382"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/10abb34b8dc3e1184de315dd261ce4b77563cda6",
"url": "https://github.com/libevent/libevent/commit/10abb34b8dc3e1184de315dd261ce4b77563cda6"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/5119ceb00557bf007f9065709e852686f3c0bb6e",
"url": "https://github.com/libevent/libevent/commit/5119ceb00557bf007f9065709e852686f3c0bb6e"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/83ba67373032334559b82409db035dd8c3cc1660",
"url": "https://github.com/libevent/libevent/commit/83ba67373032334559b82409db035dd8c3cc1660"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/ac38703b2d312200c4f967f02936af0118d384a0",
"url": "https://github.com/libevent/libevent/commit/ac38703b2d312200c4f967f02936af0118d384a0"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j"
}
],
"release_date": "2026-08-20T17:51:15.156000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: libevent: Multiple HTTP Parser Bugs Enable Request Smuggling"
},
{
"cve": "CVE-2026-63383",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-20T18:01:02.048026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520654"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent, an event notification library. A remote attacker could exploit an out-of-bounds read vulnerability in the `decode_tag_internal()` function by sending specially crafted, attacker-controlled tagged RPC (Remote Procedure Call) data. This could lead to a denial of service, causing the process that decodes the data to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: Denial of Service via malformed RPC data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in libevent can lead to a denial of service. An attacker could send specially crafted RPC data to a service utilizing libevent, causing an out-of-bounds read and crashing the application. This vulnerability primarily affects applications that process untrusted RPC data using libevent.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63383"
},
{
"category": "external",
"summary": "RHBZ#2520654",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520654"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63383"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63383",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63383"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/91ed8745eebabdd27592a83d350338a8c4626321",
"url": "https://github.com/libevent/libevent/commit/91ed8745eebabdd27592a83d350338a8c4626321"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/e1f9e21887c6b104e206a718385ba3ffc75180cb",
"url": "https://github.com/libevent/libevent/commit/e1f9e21887c6b104e206a718385ba3ffc75180cb"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6"
}
],
"release_date": "2026-08-20T17:48:24.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: Libevent: Denial of Service via malformed RPC data"
},
{
"cve": "CVE-2026-63384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T18:01:40.543023+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520658"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent. An incorrect integer conversion in the `evtag_unmarshal_header` function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A remote attacker can trigger a denial of service in applications utilizing Libevent\u0027s event tagging feature by sending a specially crafted payload. The incorrect integer conversion can lead to excessive memory allocation, causing resource exhaustion.\nThis issue is fixed in versions 2.1.13 and 2.2.2-alpha.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63384"
},
{
"category": "external",
"summary": "RHBZ#2520658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520658"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63384"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/109c16499282959d70f56ec3baf4c8b1e6646bda",
"url": "https://github.com/libevent/libevent/commit/109c16499282959d70f56ec3baf4c8b1e6646bda"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/5e3c6ebe342b34c5a9bcf48e9a32ad6708b9c416",
"url": "https://github.com/libevent/libevent/commit/5e3c6ebe342b34c5a9bcf48e9a32ad6708b9c416"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8"
}
],
"release_date": "2026-08-20T17:53:08.417000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`"
},
{
"cve": "CVE-2026-63385",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-20T18:11:18.605370+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520666"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libevent. The evhttp_decode_uri_internal function in http.c decodes percent-encoded %00 bytes into literal NUL characters without rejecting them, allowing an attacker to craft a URI such as /admin/secret%00.jpg where extension-based access checks see .jpg but the server processes /admin/secret, bypassing path-based access controls. Additionally, evhttp_header_is_valid_value accepts obsolete HTTP header line folding (CRLF followed by SP/HT), which RFC 9112 states new implementations should reject, creating a header injection vector in proxy chains where the frontend rejects obs-fold but libevent accepts it. This could lead to access control bypass, header injection, or request smuggling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: HTTP header handling bugs create risk of access control bypass.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux, OpenShift (RHCOS), RHIVOS, and community products (Fedora, Hummingbird) ship affected versions of libevent.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63385"
},
{
"category": "external",
"summary": "RHBZ#2520666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520666"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63385"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/758be0c0f69c1934ef9a84ab39e9f9e5fde2e6d0",
"url": "https://github.com/libevent/libevent/commit/758be0c0f69c1934ef9a84ab39e9f9e5fde2e6d0"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/9170dd35e64714613e8d13b290587cfc28e258e2",
"url": "https://github.com/libevent/libevent/commit/9170dd35e64714613e8d13b290587cfc28e258e2"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2"
}
],
"release_date": "2026-08-20T17:55:36.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: Libevent: HTTP header handling bugs create risk of access control bypass."
},
{
"cve": "CVE-2026-63387",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-20T18:01:14.389593+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520655"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the `dnsname_to_labels` function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the process, resulting in a denial of service or potential information disclosure and integrity impact.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the libevent library\u0027s DNS parsing component can lead to a denial of service or data corruption due to an off-by-one stack buffer overflow. A remote attacker can exploit this flaw with low attack complexity by providing a specially crafted DNS server response to services utilizing libevent for DNS resolution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63387"
},
{
"category": "external",
"summary": "RHBZ#2520655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520655"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63387"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63387",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63387"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47"
}
],
"release_date": "2026-08-20T17:53:41.863000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption"
},
{
"cve": "CVE-2026-63388",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-20T18:02:33.843530+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the `bufferevent_socket_set_conn_address_` function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AF_UNIX listener, an attacker can overwrite critical heap data, leading to memory corruption and potentially full control over the affected system. This can severely impact the confidentiality, integrity, and availability of data and services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in libevent that allows an unauthenticated local attacker to achieve arbitrary code execution. By connecting to an AF_UNIX listener, an attacker can trigger a heap out-of-bounds write, leading to memory corruption and high impact on system confidentiality, integrity, and availability. The local attack vector limits the immediate threat, but the unauthenticated nature and severe consequences elevate its importance.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63388"
},
{
"category": "external",
"summary": "RHBZ#2520661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63388"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/52057cb33d0c20c0a0453fbabe6c0c96854931b9",
"url": "https://github.com/libevent/libevent/commit/52057cb33d0c20c0a0453fbabe6c0c96854931b9"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/commit/ef38f926e9cd1f082416c6fff13587bc1f431d72",
"url": "https://github.com/libevent/libevent/commit/ef38f926e9cd1f082416c6fff13587bc1f431d72"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha",
"url": "https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha"
},
{
"category": "external",
"summary": "https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338",
"url": "https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338"
}
],
"release_date": "2026-08-20T17:44:18.435000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling"
},
{
"cve": "CVE-2026-73072",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-11T15:41:15.596551+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514037"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Heap buffer overflow allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A local attacker can exploit an Important heap buffer overflow in Vim to execute arbitrary code by tricking a user into loading a malicious spell file.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73072"
},
{
"category": "external",
"summary": "RHBZ#2514037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a",
"url": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0846",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0846"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64",
"url": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64"
}
],
"release_date": "2026-08-11T15:31:35.331000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "If spell checking is unused, disable it with set nospell in ~/.vimrc and do not set spelllang. If spell is required, load only trusted .spl files from Vim\u2019s spell directories and do not place untrusted spell files on runtimepath. Additionally, consider disabling modelines (set nomodeline in ~/.vimrc) to prevent untrusted text files from automatically overriding these settings when opened.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Heap buffer overflow allows arbitrary code execution"
},
{
"cve": "CVE-2026-73076",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T15:41:02.894650+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514034"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted vimball",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim where a crafted vimball can lead to arbitrary command execution. The flaw allows an attacker to embed malicious commands within a `.VimballRecord` file, which are then executed with user privileges during a later, unrelated vimball installation or removal. This extends the impact of processing untrusted vimball files beyond the initial installation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73076"
},
{
"category": "external",
"summary": "RHBZ#2514034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514034"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452",
"url": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2"
}
],
"release_date": "2026-08-11T15:37:59.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Avoid installing or removing vimballs from untrusted sources. This vulnerability relies on a user processing a malicious vimball, which then injects commands that are executed during a subsequent vimball operation. Exercise caution when handling vimball files from unknown or unverified origins.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted vimball"
},
{
"cve": "CVE-2026-73077",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:11:25.535913+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514065"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim\u0027s shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s shell plugins allows full system compromise in Red Hat environments if a user selects crafted text in Visual mode and triggers a keyword lookup. This does not affect RHEL 8 and older versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73077"
},
{
"category": "external",
"summary": "RHBZ#2514065",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514065"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e",
"url": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2"
}
],
"release_date": "2026-08-11T15:39:24.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users can disable the `keywordprg` option for shell script filetypes. This prevents Vim from executing external commands via the `K` command with potentially untrusted input. Create or edit the following files in your Vim configuration directory:\n\n- `~/.vim/after/ftplugin/sh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/zsh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/ps1.vim`: `setlocal keywordprg=`\n\nThis change takes effect the next time a shell script is opened in Vim.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling"
},
{
"cve": "CVE-2026-73078",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:10:59.827742+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514058"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Vim\u0027s netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s `netrw` plugin allows for arbitrary command execution in GUI Vim. By crafting a malicious directory path, an attacker could exploit improper neutralization of special characters when the path is browsed or bookmarked, leading to command injection. This issue specifically impacts GUI installations and requires user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73078"
},
{
"category": "external",
"summary": "RHBZ#2514058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514058"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69",
"url": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2"
}
],
"release_date": "2026-08-11T15:41:08.048000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid browsing or bookmarking untrusted or maliciously crafted directory paths within GUI Vim. Users should exercise caution when interacting with `netrw` menu entries derived from external or untrusted sources.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries"
},
{
"cve": "CVE-2026-73281",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-11T19:31:35.189709+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s `ssh-agent` component. A misinteraction between agent locking and the `session-bind@openssh.com` extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS#11 tokens or utilize keys with destination restrictions, bypassing intended security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: ssh-agent allows remote execution of local operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has determined that this vulnerability has limited impact. Exploitation requires an authenticated SSH session with agent forwarding enabled and the agent in a locked state. Only OpenSSH versions 8.9 and later contain the vulnerable session-bind@openssh.com extension code. Red Hat Enterprise Linux 6, 7, 8, and RHEL 9 through 9.6 ship OpenSSH versions prior to 8.9 and are not affected. Red Hat may apply this fix in a future update for affected products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73281"
},
{
"category": "external",
"summary": "RHBZ#2514327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73281"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:10:33.079000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Avoid using ssh-agent forwarding to untrusted remote hosts, or disable agent forwarding entirely by removing `ForwardAgent yes` from SSH configuration. If agent forwarding is required, avoid locking the agent while forwarded sessions are active.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssh: OpenSSH: ssh-agent allows remote execution of local operations"
},
{
"cve": "CVE-2026-73282",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-11T19:31:39.544427+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514328"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. A use-after-free vulnerability exists in the `ssh` client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A remote attacker with high attack complexity could potentially exploit this to achieve low impact on confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free flaw exists in OpenSSH\u0027s ssh client during concurrent remote-forwarding processing. When adding a remote forward via the local session multiplexing socket while a server remote-forward open request is pending, realloc data management fails, freeing memory that remains actively referenced. A remote attacker with high attack complexity can exploit this timing window to corrupt process memory, posing a low impact to confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73282"
},
{
"category": "external",
"summary": "RHBZ#2514328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73282"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:12:24.334000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Avoid issuing dynamic remote-forwarding commands over active SSH multiplexing connections, or disable socket multiplexing by setting ControlMaster no in ~/.ssh/config.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client"
},
{
"cve": "CVE-2026-73283",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-08-11T19:31:05.763903+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514321"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s `sshd` component. The `restrict` keyword, designed to limit tunnel forwarding within the `authorized_keys` file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to unauthorized network access or resource usage through tunnels.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Tunnel forwarding restriction bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An authorization bypass flaw was found in OpenSSH\u0027s sshd daemon. When processing SSH public key authentication, sshd fails to enforce the restrict keyword in authorized_keys against TUN/TAP tunnel forwarding requests. An authenticated user holding a restricted key can still establish virtual network interface tunnels if tunnel forwarding is globally enabled on the server. This allows authorized users to bypass intended per-key restriction policies, posing a Moderate impact to confidentiality and integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73283"
},
{
"category": "external",
"summary": "RHBZ#2514321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514321"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73283"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:15:24.335000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "Set PermitTunnel no in /etc/ssh/sshd_config to disable TUN/TAP tunnel forwarding server-wide. Alternatively, restrict tunnel permissions for specific users or groups using Match blocks in sshd_config or explicit no-tun directives in authorized_keys.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Tunnel forwarding restriction bypass"
},
{
"cve": "CVE-2026-78002",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-08-21T19:28:07.933000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521135"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in rsyslog allows an unauthenticated remote attacker to trigger a heap buffer overflow, leading to a denial of service. The vulnerability occurs when processing specially crafted syslog messages containing specific RainerScript `replace()` function calls. Red Hat Enterprise Linux systems configured to receive remote syslog messages are susceptible to this issue, potentially impacting logging availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-78002"
},
{
"category": "external",
"summary": "RHBZ#2521135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521135"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-78002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78002"
},
{
"category": "external",
"summary": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3",
"url": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3"
}
],
"release_date": "2026-08-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict network access to the rsyslog service to only trusted hosts. This can be achieved by configuring firewall rules to limit incoming connections to UDP and TCP port 514. Alternatively, if remote syslog reception is not required, disable the `imudp` and `imtcp` modules in the `/etc/rsyslog.conf` configuration file. After modifying the rsyslog configuration or firewall rules, the rsyslog service or firewall service must be restarted for the changes to take effect.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function"
},
{
"cve": "CVE-2026-82474",
"cwe": {
"id": "CWE-1220",
"name": "Insufficient Granularity of Access Control"
},
"discovery_date": "2026-08-29T16:40:54.539576+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525889"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the `execveat` system call in ptrace-based intercept mode. By directly calling `execveat` or `fexecve`, an attacker can execute programs that would otherwise be denied, thereby circumventing policy enforcement and logging mechanisms.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Policy bypass allows unauthorized program execution via execveat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Sudo allows a local attacker, already authorized to run specific commands, to bypass configured policy restrictions. By directly invoking `execveat` or `fexecve` when Sudo is operating in ptrace-based intercept mode, an attacker can execute programs otherwise denied by `sudo` policies. This undermines granular access control and could lead to unauthorized command execution on affected Red Hat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-82474"
},
{
"category": "external",
"summary": "RHBZ#2525889",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525889"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-82474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82474"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82474",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82474"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo",
"url": "https://github.com/sudo-project/sudo"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c",
"url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf",
"url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat",
"url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
}
],
"release_date": "2026-08-29T16:35:33.836000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-24T11:59:15+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:71603"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the ptrace-based intercept mode in the `sudoers` configuration. Add `Defaults !intercept` to `/etc/sudoers` or a file within `/etc/sudoers.d/`. This action may affect advanced `sudo` policy enforcement or logging features that rely on ptrace-based interception. Always validate `sudoers` file changes with `visudo` to prevent system lockout.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:b747ed57a2ed7dfc828ae6b99d8d7fff1fce78fc305b0dea48850368c49482b0_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:e47af425f90cd728c6509fea8ce8063c5b09d3e05f630aa168959ce03e0345b6_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:55999d0fdb5cb82536e4f27f820e655afa3036ea04fbb90b949f18c37629c52e_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:d20d237b12a31033a78d5a4dccf3ba61cfa43cdb564993c98997e6813d20cfd8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Policy bypass allows unauthorized program execution via execveat"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…