Red Hat Security AdvisoryRHSA-2026:10065
Red Hat Update Infrastructure 5.1 security update
Released 2026-04-23 · Red Hat rating Important · View on Red Hat →
Fixes 17 records
Priority HIGH 66
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.25942 · Published 2026-03-24 · Fixed in 1.29.7, 1.28.3 +3 CWE-122
Priority MEDIUM 51
A flaw was found in libarchive.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01092 · Published 2026-03-30 · Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190
Priority MEDIUM 45
When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00955 · Published 2026-03-24 · Fixed in 1.29.7, 1.28.3 +3 CWE-476
Priority MEDIUM 41
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination o…
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00934 · Published 2026-03-24 · Partial fix · 1.29.7, 1.28.3 +3 CWE-125
Priority MEDIUM 41
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a spe…
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.01071 · Published 2026-03-24 · Fixed in 1.29.7, 1.28.3 CWE-190
Priority MEDIUM 41
A flaw was found in libarchive.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01287 · Published 2026-03-19 · Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00823 · Published 2026-03-18 · Fixed in 1.68.1 CWE-617
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-06 · Partial fix · 1.25.8, 1.26.1 CWE-425
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00721 · Published 2026-03-13 · Partial fix · 3.7.7-5.el10_1, 3.7.7-5.el10_0 +33 CWE-835
Priority LOW 39
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01353 · Published 2026-02-27 · Fixed in 9.2.0073 CWE-86
Priority LOW 36
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00867 · Published 2026-03-24 · Fixed in 9.2.0202 CWE-78
Priority LOW 36
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.0038 · Published 2026-02-04 · Partial fix · 1.29.5, R36 P2 +2 CWE-349
Priority LOW 35
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00206 · Published 2026-02-27 · Fixed in 9.2.0077 CWE-122
Priority LOW 33
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.
CVSS 4.0HIGH 7.0· Local · No auth · User interaction · EPSS 0.0032 · Published 2026-03-20 · Fixed in 3.10.21, 3.11.16 +4 CWE-20
Priority LOW 32
The issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01327 · Published 2023-09-26 · Partial fix · 17, 12.7 +4
Priority LOW 29
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.00262 · Published 2026-02-06 · Partial fix · 9.1.2132 CWE-122
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.02375 · Published 2026-03-12 · Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908
THREATIST.IORead the docs