agentprime: red-hat-update-infrastructure-5Every new CVE for red-hat-update-infrastructure-5.https://agentprime.io/CVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-103870: Pulp-rpm: distribution tree publish creates directories from .treeinfo idshttps://agentprime.io/advisories/CVE-2026-103870/https://agentprime.io/advisories/CVE-2026-103870/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:18 GMTCVECVE-2026-103868: Pulp-container: registry credentials are reused across remotes in a workerhttps://agentprime.io/advisories/CVE-2026-103868/https://agentprime.io/advisories/CVE-2026-103868/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:12 GMTCVECVE-2026-90959: Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key thefthttps://agentprime.io/advisories/CVE-2026-90959/https://agentprime.io/advisories/CVE-2026-90959/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 14:49:10 GMTCVECVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-84232: Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contenthttps://agentprime.io/advisories/CVE-2026-84232/https://agentprime.io/advisories/CVE-2026-84232/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:18:59 GMTCVECVE-2026-13732: Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfhttps://agentprime.io/advisories/CVE-2026-13732/https://agentprime.io/advisories/CVE-2026-13732/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 19:23:18 GMTCVECVE-2026-78002: Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionhttps://agentprime.io/advisories/CVE-2026-78002/https://agentprime.io/advisories/CVE-2026-78002/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 16:12:59 GMTCVECVE-2026-19654: Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdhttps://agentprime.io/advisories/CVE-2026-19654/https://agentprime.io/advisories/CVE-2026-19654/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 20:46:31 GMTCVECVE-2026-18477: Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escapehttps://agentprime.io/advisories/CVE-2026-18477/https://agentprime.io/advisories/CVE-2026-18477/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 15:34:36 GMTCVECVE-2026-18508: Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwritehttps://agentprime.io/advisories/CVE-2026-18508/https://agentprime.io/advisories/CVE-2026-18508/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 14:51:41 GMTCVECVE-2026-16730: Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setuphttps://agentprime.io/advisories/CVE-2026-16730/https://agentprime.io/advisories/CVE-2026-16730/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 11:26:18 GMTCVECVE-2026-12701: Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexporthttps://agentprime.io/advisories/CVE-2026-12701/https://agentprime.io/advisories/CVE-2026-12701/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:18:18 GMTCVEcriticalCVE-2026-13757: P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsinghttps://agentprime.io/advisories/CVE-2026-13757/https://agentprime.io/advisories/CVE-2026-13757/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 18:44:24 GMTCVECVE-2026-55654: Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel terminationhttps://agentprime.io/advisories/CVE-2026-55654/https://agentprime.io/advisories/CVE-2026-55654/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:37:00 GMTCVECVE-2026-55655: Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionshttps://agentprime.io/advisories/CVE-2026-55655/https://agentprime.io/advisories/CVE-2026-55655/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:25 GMTCVECVE-2026-55653: Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of servicehttps://agentprime.io/advisories/CVE-2026-55653/https://agentprime.io/advisories/CVE-2026-55653/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:22 GMTCVECVE-2026-5419: Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalhttps://agentprime.io/advisories/CVE-2026-5419/https://agentprime.io/advisories/CVE-2026-5419/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:26:56 GMTCVECVE-2026-3832: Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responsehttps://agentprime.io/advisories/CVE-2026-3832/https://agentprime.io/advisories/CVE-2026-3832/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:41:28 GMTCVECVE-2026-5704: Tar: tar: hidden file injection via crafted archiveshttps://agentprime.io/advisories/CVE-2026-5704/https://agentprime.io/advisories/CVE-2026-5704/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:17:27 GMTCVECVE-2026-2100: P11-kit: null dereference via c_derivekey with specific null parametershttps://agentprime.io/advisories/CVE-2026-2100/https://agentprime.io/advisories/CVE-2026-2100/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 20:01:46 GMTCVECVE-2025-9820: Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionhttps://agentprime.io/advisories/CVE-2025-9820/https://agentprime.io/advisories/CVE-2025-9820/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jan 2026 19:58:32 GMTCVECVE-2025-14104: Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernameshttps://agentprime.io/advisories/CVE-2025-14104/https://agentprime.io/advisories/CVE-2025-14104/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 16:22:09 GMTCVECVE-2025-10911: Libxslt: use-after-free with key data stored cross-rvthttps://agentprime.io/advisories/CVE-2025-10911/https://agentprime.io/advisories/CVE-2025-10911/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 15:13:14 GMTCVECVE-2025-5278: Coreutils: heap buffer under-read in gnu coreutils sort via key specificationhttps://agentprime.io/advisories/CVE-2025-5278/https://agentprime.io/advisories/CVE-2025-5278/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 20:52:58 GMTCVE