All products

Red Hat Enterprise Linux 10/clevis-pin-trustee

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review. tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Low Fix reported
webpki: Name constraints for URI names were incorrectly acceptedCVE-2026-93600 · GHSA-965H-392X-2MH5Version ranges need review. rustls-webpkiConfidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Rust / CargoRed Hat Low Fix reported
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
AWS-LC has PKCS7_verify Certificate Chain Validation BypassCVE-2026-3336 · GHSA-CFWJ-9WP5-WQVPVersion ranges need review. aws-lc-sysConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Rust / CargoRed Hat High Fix reported
AWS-LC has PKCS7_verify Signature Validation BypassCVE-2026-3338 · GHSA-HFPC-8R3F-GW53Version ranges need review. aws-lc-sysConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Rust / CargoRed Hat High Fix reported
CRL Distribution Point Scope Check Logic Error in AWS-LCCVE-2026-4428 · GHSA-9F94-5G5W-GF6RVersion ranges need review. aws-lc-fips-sysaws-lc-sys Rust / CargoRed Hat High Fix reported
Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsingCVE-2026-31812 · GHSA-6XVM-J4WR-6V98Version ranges need review. quinn-protoConfidential Compute Attestation/build-of-trustee/trustee-rhel9 Rust / CargoRed Hat High Fix reported
AWS-LC has Timing Side-Channel in AES-CCM Tag VerificationCVE-2026-3337 · GHSA-65P9-R9H6-22VJVersion ranges need review. aws-lc-fips-sysaws-lc-sys Rust / CargoRed Hat High Fix reported
time vulnerable to stack exhaustion Denial of Service attackCVE-2026-25727 · GHSA-R6V5-FH4H-64XCVersion ranges need review. timeConfidential Compute Attestation/build-of-trustee/trustee-rhel9 Rust / CargoRed Hat Medium Fix reported
hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Medium No fix reported
hex: hex: Terminal output spoofing via unescaped control sequencesCVE-2026-81856 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Medium No fix reported