Threats Tagged 'cve-2026-5121'

This advisory concerns multiple security vulnerabilities affecting Red Hat Update Infrastructure 5. 2 Technology Preview container images. The Technology Preview features are not fully supported, may not be functionally complete, and are not intended for production deployment. The advisory lists nine CVEs including CVE-2026-4424 and others, with a high severity rating. No official patch or fix is currently provided for these vulnerabilities. Users are directed to consult the Technology Preview Release Notes for usage instructions. The advisory emphasizes that these images are for preview purposes only and not suitable for production environments.

Multiple security vulnerabilities affecting RHEL-8 based Middleware Containers container images have been addressed by Red Hat in updated container images. These include high severity issues such as a stack-based buffer overflow in GnuTLS (CVE-2025-9820), denial of service vulnerabilities, information disclosure, and arbitrary code execution in various components including libarchive and Python. The advisory covers a range of CVEs fixed by backported patches in updated container images. Users are advised to upgrade to the updated images and rebuild dependent container images to mitigate these issues.

Red Hat Discovery is a tool used to inspect and report environment data such as system counts, operating systems, and configuration details within a network. The advisory references multiple CVEs including CVE-2025-62718 affecting Red Hat Discovery and related products. The vendor advisory does not indicate any available fixes or patches for these vulnerabilities as of the publication date. No known exploits are reported in the wild. The severity is assessed as high based on the advisory metadata, but detailed impact specifics are not provided. The advisory suggests installing containers via discovery-installer RPM but does not explicitly state this as a remediation for the vulnerabilities. No geographic targeting is indicated. Patch status is not confirmed; users should consult the official Red Hat advisory for updates.

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.