Red Hat OpenShift Container Platform 4/openshift4/lifecycle-agent-operator-bundle

Red Hat · Package

12 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review.	github.com/moby/sys/user Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-10-20
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855 · GO-2026-6355	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-24
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review.	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream github.com/aws/aws-sdk-go-v2/service/bedrockagentcore	GoRed Hat	Medium	Fix reported	2026-09-12
Insecure Temporary File usage in github.com/golang/glogCVE-2024-45339 · GHSA-6WXM-MPQJ-6JPFVersion ranges need review.	github.com/golang/glog Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review.	golang.org/x/crypto Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshCVE-2026-78662 · GO-2026-6354	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-03
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsingCVE-2026-79775	Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 Cryostat 4/cryostat/cryostat-storage-rhel9	Red Hat	Medium	No fix reported	Not recorded