Red Hat Enterprise Linux 9/rust-sequoia-sq

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review.	tokio Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-10-24
webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review.	rustls-webpki Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Low	Fix reported	2026-09-19
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review.	rustls-webpki Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-09-19
botan: botan: Certificate validation bypass via missing OCSP response signature verificationCVE-2026-118768	Red Hat Ansible Automation Platform 2/ansible-automation-platform-27/hub-rhel9 Red Hat Enterprise Linux 10/rust-podman-sequoia	Red Hat	Medium	No fix reported	Not recorded
botan: Botan: Server-Side Request Forgery via OCSP client HTTP redirectCVE-2026-118766	Red Hat Ansible Automation Platform 2/ansible-automation-platform-27/hub-rhel9 Red Hat Enterprise Linux 10/rust-podman-sequoia	Red Hat	Medium	No fix reported	Not recorded
botan: Botan: Integer overflow when reporting block size in FFI can cause memory corruptionCVE-2026-118769	Red Hat Ansible Automation Platform 2/ansible-automation-platform-27/hub-rhel9 Red Hat Enterprise Linux 10/rust-podman-sequoia	Red Hat	Medium	No fix reported	Not recorded