Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-runtimecfg-rhel9

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review.	github.com/elazarl/goproxy Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-08-07
dnsmasq: dnsmasq-utils 'dhcp_release' Denial of ServiceCVE-2020-37127	Red Hat Enterprise Linux 10/dnsmasq Red Hat Enterprise Linux 6/dnsmasq	Red Hat	Medium	No fix reported	Not recorded
dnsmasq: dnsmasq: heap out-of-bounds read in DHCPv6 option 39 FQDN decoderCVE-2026-93009	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	Low	No fix reported	Not recorded
dnsmasq: dnsmasq: heap out-of-bounds write in DNSSEC validator via to_wire/from_wire transformsCVE-2026-93011	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	Medium	No fix reported	Not recorded
dnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-93010	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	Low	No fix reported	Not recorded
dnsmasq: dnsmasq: out-of-bailiwick cache injection through CNAME chase in split-DNS configurationsCVE-2026-93008	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	High	No fix reported	Not recorded
dnsmasq: dnsmasq: TCP/53 child-slot exhaustion starves DNSSEC validationCVE-2026-93007	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	Medium	No fix reported	Not recorded
dnsmasq: dnsmasq: TFTP prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-93006	Red Hat Ceph Storage 9/rhceph/alloy-rhel10 Red Hat Enterprise Linux 10/dnsmasq	Red Hat	Medium	No fix reported	Not recorded