DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Quay und Enterprise Linux (pypdf, urllib3, URI): Mehrere Schwachstellen
view advisory published 2026-10-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Quay und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-102998US | high7.5 | — | ||
pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream gener… | ||||
| CVE-2026-102994US | high7.5 | — | ||
pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long… | ||||
| CVE-2026-97689US | high7.5 | — | ||
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the strea… | ||||
| CVE-2026-97687US | high8.1 | — | ||
urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode,… | ||||
| CVE-2026-19953US | — | — | ||
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep.
nameprep lowercases each host label but performs… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-84577 vom 2026-10-19external
- Oracle Linux Security Advisory ELSA-2026-84578 vom 2026-10-19external
- Oracle Linux Security Advisory ELSA-2026-84587 vom 2026-10-19external
- Oracle Linux Security Advisory ELSA-2026-84588 vom 2026-10-19external
- Oracle Linux Security Advisory ELSA-2026-85917 vom 2026-10-27external
- Red Hat Security Advisory RHSA-2026:83822 vom 2026-10-18external
- Red Hat Security Advisory RHSA-2026:84577 vom 2026-10-18external
- Red Hat Security Advisory RHSA-2026:84578 vom 2026-10-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan