All products

Red Hat Enterprise Linux 8/buildah

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review. google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent has a potential denial of serviceCVE-2025-47913 · GHSA-56W8-48FP-6MGV golang.org/x/crypto/ssh/agentgolang.org/x/crypto GoRed Hat High Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
podman: Arbitrary file write when importing OCI archiveCVE-2025-11395 Red Hat Enterprise Linux 8/buildahRed Hat Enterprise Linux 8/container-tools:rhel8/podman Red Hat Medium No fix reported
podman: buildah: skopeo: containers/storage: Malicious tar whiteout header allows replacement of extraction destination directoryCVE-2026-79699 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/eda-controller-rhel8 Red Hat Low No fix reported