Red Hat Update Infrastructure 5.

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

• Red Hat Migration Toolkit for Applications 8
• Red Hat Migration Toolkit for Virtualization
• Path traversal

Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

• Red Hat Satellite 6
• Red Hat Update Infrastructure 4 for Cloud Providers
• Path traversal

Pulp-container: registry credentials are reused across remotes in a worker

• Red Hat Ansible Automation Platform 2
• Red Hat Satellite 6
• CWE-488

Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

• Red Hat Ansible Automation Platform 2.6 for RHEL 9
• Red Hat Ansible Automation Platform 2.6
• Path traversal

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

• Red Hat Ansible Automation Platform 2
• Red Hat Satellite 6
• Cross-site scripting (XSS)

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Race condition

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Path traversal

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-755

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Path traversal

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-923

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

Tar: tar: hidden file injection via crafted archives

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Unrestricted file upload

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption