Security
فارسی
All products

Red Hat Enterprise Linux 10/rust-afterburn

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review. tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds checkCVE-2025-55159 · GHSA-QX2V-8332-M4FVVersion ranges need review. slabRed Hat Enterprise Linux 10/389-ds-base Rust / CargoRed Hat Medium Fix reported
webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Low Fix reported
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review. rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat Medium Fix reported
time vulnerable to stack exhaustion Denial of Service attackCVE-2026-25727 · GHSA-R6V5-FH4H-64XCVersion ranges need review. timeConfidential Compute Attestation/build-of-trustee/trustee-rhel9 Rust / CargoRed Hat Medium Fix reported
crossbeam-channel Vulnerable to Double Free on DropCVE-2025-4574 · GHSA-PG9F-39PC-QF8GVersion ranges need review. crossbeam-channelRed Hat Enterprise Linux 10/389-ds-base Rust / CargoRed Hat Medium Fix reported
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processingCVE-2026-28390 Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundleConfidential Cluster Operator/redhat-user-workloads/attestation-key-register Red Hat Medium No fix reported
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988 Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9 Red Hat Low No fix reported
Void: Void: Sensitive file exfiltration via AI agent path traversal vulnerabilityCVE-2026-65698 Logging Subsystem for Red Hat OpenShift/openshift-logging/vector-rhel9Red Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported
nix: Nix: Arbitrary file truncation via time-of-check/time-of-use raceCVE-2026-64846 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Compute Attestation/agent-sandbox/agent-sandbox-router Red Hat Low No fix reported
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Low No fix reported
hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Medium No fix reported
hex: hex: Terminal output spoofing via unescaped control sequencesCVE-2026-81856 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Medium No fix reported