Red Hat Enterprise Linux 9/rhel9-eus/rhel-9.8-bootc

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review.	github.com/moby/sys/user Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-10-20
Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token LeakageCVE-2026-49478 · GHSA-F5MR-Q85P-6HH6Version ranges need review.	github.com/sigstore/fulcio Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	High	Fix reported	2026-09-10
Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fixCVE-2026-45409 · GHSA-65PC-FJ4G-8RJXVersion ranges need review.	idna Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
kernel: tipc: skb_linearize the head skb when reassembling msgsCVE-2021-47162	Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-deep-inspection-rhel9 Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-virt-v2v-rhel9	Red Hat	Low	No fix reported	Not recorded
kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereferenceCVE-2021-47183	Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-virt-v2v-rhel10 Red Hat Enterprise Linux 10/rhel10-eus/rhel-10.0-bootc	Red Hat	Low	No fix reported	Not recorded
kernel: mac80211: fix skb length check in ieee80211_scan_rx()CVE-2021-47251	Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-virt-v2v-rhel10 NVIDIA JetPack 6 for RHEL/nvidia/nvidia-jetpack-for-rhel9	Red Hat	Medium	No fix reported	Not recorded
podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layersCVE-2026-114236	Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 DPU kit for NVIDIA/dpu-kit-for-nvidia/bluefield-ocp-layer-rhel10	Red Hat	Low	No fix reported	Not recorded