Red Hat Ceph Storage 7/rhceph/rhceph-promtail-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621 · GHSA-PWHC-RPQ9-4C8WVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	High	Fix reported	2026-09-10
Prometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151 · GHSA-WG65-39GG-5WFJVersion ranges need review.	github.com/prometheus/prometheus File Integrity Operator/compliance/openshift-file-integrity-operator-bundle	GoRed Hat	High	Fix reported	2026-09-09
Prometheus: Remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154 · GHSA-8RM2-7QQF-34QMVersion ranges need review.	github.com/prometheus/prometheus/v2 github.com/prometheus/prometheus	GoRed Hat	High	Fix reported	2026-07-14
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDsCVE-2026-88031	Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	Red Hat	High	No fix reported	Not recorded