Red Hat OpenShift Container Platform 5/openshift5/ose-openshift-controller-manager-rhel9

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review.	github.com/moby/sys/user Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-10-20
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token LeakageCVE-2026-49478 · GHSA-F5MR-Q85P-6HH6Version ranges need review.	github.com/sigstore/fulcio Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	High	Fix reported	2026-09-10