Security
فارسی
All products

Red Hat OpenStack Platform 16.2/rhosp-rhel8/osp-director-downloader

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
opencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921 · GHSA-FH74-HM69-RQJWVersion ranges need review. github.com/opencontainers/runcRed Hat Enterprise Linux 8/container-tools:1.0/runc GoRed Hat Medium Fix reported
go-git improperly verifies data integrity values for .idx and .pack filesCVE-2026-25934 · GHSA-37CX-329C-33X3Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Medium Fix reported
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClassCVE-2025-13281 · GHSA-R6J8-C6R2-37RRVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
containerd CRI plugin: Insecure handling of image volumesCVE-2022-23648 · GHSA-CRP2-QRR5-8PQ7Version ranges need review. github.com/containerd/containerdRed Hat OpenStack Platform 16.2/osp-director-provisioner-container GoRed Hat High Fix reported
Insufficiently restricted permissions on plugin directoriesCVE-2021-41103 · GHSA-C2H3-6MXW-7MVQVersion ranges need review. github.com/containerd/containerdRed Hat OpenStack Platform 16.2/osp-director-provisioner-container GoRed Hat Medium Fix reported
Archive package allows chmod of file outside of unpack target directoryCVE-2021-32760 · GHSA-C72P-9XMJ-RX3WVersion ranges need review. github.com/containerd/containerdRed Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator GoRed Hat Medium Fix reported
XML Entity Expansion and Improper Input Validation in Kubernetes API serverCVE-2019-11253 · GHSA-PMQP-H87C-MR78Version ranges need review. k8s.io/kubernetesOpenShift Service Mesh 1/serivicemesh-grafana GoRed Hat High Fix reported
Path Traversal in DockerCVE-2014-9356 · GHSA-VJ3F-3286-R4PFVersion ranges need review. github.com/docker/dockerRed Hat OpenStack Platform 16.2/osp-director-provisioner-container GoRed Hat Medium Fix reported
containerd-shim API Exposed to Host Network ContainersCVE-2020-15257 · GHSA-36XW-FX78-C5R4Version ranges need review. github.com/containerd/containerdRed Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator GoRed Hat Medium Fix reported
Unprivileged pod using `hostPath` can side-step active LSM when it is SELinuxCVE-2021-43816 · GHSA-MVFF-H3CJ-WJ9CVersion ranges need review. github.com/containerd/containerdRed Hat Advanced Cluster Management for Kubernetes 2/multicloud-operators-channel-container GoRed Hat High Fix reported
github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)CVE-2021-29482 · GHSA-25XM-HR59-7C27Version ranges need review. github.com/ulikunitz/xzMigration Toolkit for Containers/openshift-migration-plugin-container GoRed Hat High Fix reported
Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRDCVE-2025-29781 · GHSA-C98H-7HP9-V9HQVersion ranges need review. github.com/metal3-io/baremetal-operator/apisAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8 GoRed Hat Medium Fix reported
Information Disclosure in go.elastic.co/apmCVE-2021-22133 · GHSA-QQC5-RGCC-CJQHVersion ranges need review. go.elastic.co/apmRed Hat OpenStack Platform 16.2/osp-director-provisioner-container GoRed Hat Low Fix reported
miekg/dns insecurely generates random numbersCVE-2019-19794 · GHSA-44R7-7P62-Q3FRVersion ranges need review. github.com/miekg/dnsRed Hat OpenStack Platform 16.2/osp-director-provisioner-container GoRed Hat Medium Fix reported
Improper Locking in github.com/containers/storageCVE-2021-20291 · GHSA-7QW8-847F-PGGMVersion ranges need review. github.com/containers/storageRed Hat Enterprise Linux 7/buildah GoRed Hat Medium Fix reported
Insertion of Sensitive Information into Log File in Hashicorp go-getterCVE-2022-29810 · GHSA-27RQ-4943-QCWPVersion ranges need review. github.com/hashicorp/go-getterRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/cluster-curator-controller-rhel8 GoRed Hat Medium Fix reported