Red Hat Enterprise Linux 10/mesa

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review.	tokio Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-10-24
webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review.	rustls-webpki Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Low	Fix reported	2026-09-19
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review.	rustls-webpki Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-09-19
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH	tar Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs	npmRed Hat	Medium	Fix reported	2026-09-10
tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review.	tar Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	Rust / CargoRed Hat	Medium	Fix reported	2026-09-10
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processingCVE-2026-28390	Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundle Confidential Cluster Operator/redhat-user-workloads/attestation-key-register	Red Hat	Medium	No fix reported	Not recorded