Redhat Update Infrastructure vulnerabilities

• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• f5 nginx open source, nginx plus, dos +14 more +16 more NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability CVE-2026-42055 Public exploitFix available 9.2 CriticalJune 17, 2026
• opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Fix available 7.8 HighMay 26, 2026
• f5 nginx open source, nginx plus, debian linux +15 more +17 more NGINX ngx_http_rewrite_module vulnerability CVE-2026-9256 Public exploitFix available EPSS 10.9% 9.2 CriticalMay 22, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file CVE-2026-9149 Fix available 6.5 MediumMay 20, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums CVE-2026-9150 Fix available 6.5 MediumMay 20, 2026
• microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 more P11-kit: null dereference via c_derivekey with specific null parameters CVE-2026-2100 Fix available 5.3 MediumFebruary 9, 2026
• m2crypto project m2crypto, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 CVE-2023-50781 Fix available 7.5 HighFebruary 5, 2024
• couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 more Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 CVE-2023-50782 Fix available 7.5 HighDecember 14, 2023
• pulpproject pulp ansible, redhat ansible automation platform, satellite +1 more +3 more Plaintext storage of tokens in pulp_ansible CVE-2022-3644 Fix available 5.5 MediumOctober 25, 2022
• redhat update infrastructure, rhui +1 more RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates CVE-2013-4518 5.5 MediumNovember 4, 2019