Red Hat Security AdvisoryRHSA-2026:54387
Red Hat Update Infrastructure 5.2 security update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
Fixes 13 records
Priority HIGH 72
A double free issue has been identified in libarchive's RAR5 reader.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00792 · Published 2026-06-30 · Partial fix · 3.7.7-10.el10_2, 3.7.7-5.el10_0.1 +58 CWE-415
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.003 · Published 2026-07-08 · Partial fix · 10.4 CWE-416
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00216 · Published 2026-07-09 · Partial fix · 9.2.0736 CWE-94
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00137 · Published 2026-07-09 · Partial fix · 9.2.0735 CWE-94
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00145 · Published 2026-06-25 · Fixed in 9.2.0699 CWE-94
Priority LOW 29
A flaw was found in OpenSSH.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0053 · Published 2026-06-23 · Partial fix · 9.9p1-25.el10_2, 9.9p1-7.el10_0.5 +46 CWE-415
Priority LOW 29
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
CVSS 3.1MEDIUM 6.7· Local · No auth · No interaction · EPSS 0.00182 · Published 2026-04-23 · Fixed in 1.10.4, 1.11.3 +1 CWE-787
Priority LOW 27
A flaw was found in p11-kit.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00154 · Published 2026-06-29 · Partial fix · 0.26.4-1.el10_2, 0.26.4-1.el9_8 +32 CWE-674
Priority LOW 26
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 5.7· Local · No auth · User interaction · EPSS 0.00124 · Published 2026-06-25 · Partial fix · 9.2.0653 CWE-787
Priority LOW 26
A flaw was found in OpenSSH.
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.00124 · Published 2026-06-23 · Partial fix · 9.9p1-25.el10_2, 9.9p1-7.el10_0.5 +46 CWE-923
Priority LOW 24
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0025 · Published 2026-07-08 · Partial fix · 10.4 CWE-23
Priority LOW 20
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 4.0· Local · No auth · User interaction · EPSS 0.00118 · Published 2026-06-25 · Partial fix · 9.2.0698 CWE-787
Priority LOW 19
A flaw was found in OpenSSH.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00652 · Published 2026-06-23 · Partial fix · 9.9p1-25.el10_2, 9.9p1-9.el9_8 +5 CWE-125
THREATIST.IORead the docs