Security
فارسی
All products

Red Hat OpenShift Container Platform 4/rhcos

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
podman: Arbitrary file write when importing OCI archiveCVE-2025-11395 Red Hat Enterprise Linux 8/container-tools:rhel8/podmanRed Hat Enterprise Linux 8/skopeo Red Hat Medium No fix reported
binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fieldsCVE-2025-69649 Red Hat Enterprise Linux 10/binutilsRed Hat Enterprise Linux 10/gcc-toolset-15-binutils Red Hat Low No fix reported
binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug informationCVE-2025-69652 Red Hat Enterprise Linux 10/binutilsRed Hat Enterprise Linux 10/gcc-toolset-15-binutils Red Hat Low No fix reported
binutils: double free in readelf via crafted ELF binary with malformed relocation dataCVE-2025-69650 Red Hat Enterprise Linux 10/binutilsRed Hat Enterprise Linux 10/gcc-toolset-15-binutils Red Hat Low No fix reported
binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists dataCVE-2025-69648 Red Hat Enterprise Linux 10/binutilsRed Hat Enterprise Linux 10/gcc-toolset-15-binutils Red Hat Low No fix reported
binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists dataCVE-2025-69647 Red Hat Enterprise Linux 10/binutilsRed Hat Enterprise Linux 10/gcc-toolset-15-binutils Red Hat Low No fix reported
util-linux: TOCTOU in the mount program when setting up loop devicesCVE-2026-27456 Red Hat Enterprise Linux 8/util-linuxRed Hat Enterprise Linux 9/util-linux Red Hat Medium No fix reported
vim: arbitrary command execution via modeline sandbox bypassCVE-2026-34982 Red Hat OpenShift Container Platform 4/rhcos Red Hat High No fix reported
vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypassCVE-2026-35177 Red Hat OpenShift Container Platform 4/rhcos Red Hat Medium No fix reported
vim: Vim: Arbitrary code execution via command injection in NetBeans interfaceCVE-2026-39881 Red Hat Enterprise Linux 10/vimRed Hat Enterprise Linux 6/vim Red Hat Medium No fix reported
jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflowCVE-2026-32316 Red Hat Ansible Automation Platform 2/automation-controllerRed Hat Ansible Automation Platform 2/redhat-user-workloads/controller-rhel9 Red Hat Medium No fix reported
jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted()CVE-2026-33947 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
jq: missing runtime type checks for _strindices lead to crash and limited memory disclosureCVE-2026-39956 Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-26/hub-rhel9 Red Hat Medium No fix reported
libevent: libevent: Multiple HTTP Parser Bugs Enable Request SmugglingCVE-2026-63382 Red Hat Enterprise Linux 6/libevent2Red Hat Enterprise Linux 6/libevent Red Hat High No fix reported
libevent: Libevent: HTTP header handling bugs create risk of access control bypass.CVE-2026-63385 Red Hat Enterprise Linux 6/libevent2Red Hat Enterprise Linux 6/libevent Red Hat High No fix reported
cri-o: CRI-O: unvalidated image env var causes daemon crashCVE-2026-17113 Red Hat OpenShift Container Platform 4/cri-oRed Hat OpenShift Container Platform 4/openshift/ose-rhel-coreos-8 Red Hat Medium No fix reported
corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systemsCVE-2026-81666 Red Hat Enterprise Linux 10/corosyncRed Hat Enterprise Linux 7/corosync Red Hat Medium No fix reported