Security
English
همهٔ محصولات

Red Hat Enterprise Linux 10/igvm

Red Hat · بسته
16 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat متوسط اصلاح گزارش شده
libcurl: libcurl: Use-after-free vulnerability leading to Denial of ServiceCVE-2026-10536 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux 10/snphost Red Hat متوسط اصلاح اعلام نشده
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuseCVE-2026-8932 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat متوسط اصلاح اعلام نشده
libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callbackCVE-2026-9080 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat متوسط اصلاح اعلام نشده
libcurl: libcurl: Information disclosure via cached SSL session and early dataCVE-2026-9545 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat متوسط اصلاح اعلام نشده
libcurl: libcurl: Information disclosure due to persistent Referer headerCVE-2026-9546 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat متوسط اصلاح اعلام نشده
tar: tar-rs: Information Disclosure via Symlink EscapeCVE-2026-70622 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9OpenShift Lightspeed/openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9 Red Hat متوسط اصلاح اعلام نشده
curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connectionsCVE-2026-18924 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat کم اصلاح اعلام نشده
curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authenticationCVE-2026-19931 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat متوسط اصلاح اعلام نشده
gix-transport: gix-transport: Information disclosure and virtual host spoofing via control character injectionCVE-2026-91986 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux 10/rust Red Hat متوسط اصلاح اعلام نشده
hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat متوسط اصلاح اعلام نشده
hex: hex: Terminal output spoofing via unescaped control sequencesCVE-2026-81856 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat متوسط اصلاح اعلام نشده
gix-pack: gix-pack: Denial of Service via crafted pack headerCVE-2026-109349 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux 10/rust Red Hat متوسط اصلاح اعلام نشده
gix-pack: gix-pack: Denial of Service via malformed packfile delta entriesCVE-2026-109350 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux 10/rust Red Hat متوسط اصلاح اعلام نشده
gix-pack: gix-pack: Denial of Service via crafted pack-header object countCVE-2026-109351 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux 10/rust Red Hat متوسط اصلاح اعلام نشده
gix-fs: gix-fs: Arbitrary code execution via symlink manipulation during checkoutCVE-2026-100419 Red Hat Enterprise Linux 10/igvmRed Hat Enterprise Linux AI (RHEL AI) 3/rust Red Hat متوسط اصلاح اعلام نشده