Security
فارسی
All products

Red Hat Offline Knowledge Portal/redhat-user-workloads/rhokp-core-encrypted

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-34479 · GHSA-H383-GMXW-35V2 org.apache.logging.log4j:log4j-coreRed Hat Data Grid 8/log4j-1.2-api MavenRed Hat Medium Fix reported
Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayoutCVE-2026-34481 · GHSA-W35J-PV5H-Q9Q9 org.apache.logging.log4j:log4j-layout-template-jsonRed Hat Enterprise Linux 9/log4j MavenRed Hat Medium Fix reported
Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configurationCVE-2026-34477 · GHSA-6HG6-V5C8-FPHQ org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-2-2 MavenRed Hat Medium Fix reported
Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibilityCVE-2026-34478 · GHSA-445C-VH5M-36RJ org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-3 MavenRed Hat Medium Fix reported
Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-34480 · GHSA-3PXV-7CMR-FJR4 org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-3 MavenRed Hat Medium Fix reported
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processingCVE-2026-28390 Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundleConfidential Cluster Operator/redhat-user-workloads/attestation-key-register Red Hat Medium No fix reported
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Low No fix reported
org.eclipse.jetty/jetty-http: Jetty: HTTP request smuggling via crafted chunked requestsCVE-2026-19203 Exploit Intelligence/exploit-intelligence/agent-client-rhel9OpenShift Developer Tools and Services/jenkins Red Hat High No fix reported
org.eclipse.jetty.http2/http2-common: org.eclipse.jetty.http2/jetty-http2-common: Jetty: Denial of Service via HTTP/2 race conditionCVE-2026-12611 OpenShift Developer Tools and Services/jenkinsRed Hat AMQ Broker 7/jetty-http2-common Red Hat High No fix reported