Security
English
همهٔ محصولات

Red Hat Enterprise Linux 10/keylime-agent-rust

Red Hat · بسته
12 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCECVE-2026-115905 · GHSA-M665-V7PM-7GRJ zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat بحرانی اصلاح گزارش شده
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionCVE-2026-115909 · GHSA-Q7V9-X93C-XQV3بازه‌ها نیاز به بررسی دارند. zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat زیاد اصلاح گزارش شده
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeCVE-2026-115907 · GHSA-9HJ8-73FH-9963 zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat زیاد اصلاح گزارش شده
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. CVE-2026-115908 · GHSA-HJQX-J4RW-G7XV zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat زیاد اصلاح گزارش شده
zip: AES Entry HMAC Authentication Bypass on Premature EOFCVE-2026-115906 · GHSA-8HXF-QR8P-62X4 zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat متوسط اصلاح گزارش شده
Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8بازه‌ها نیاز به بررسی دارند. tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Rust / CargoRed Hat متوسط اصلاح گزارش شده
actix-http has HTTP/1.1 CL.TE Request Smuggling CVE-2026-73051 · GHSA-XHJ4-VRGC-HR34 actix-httpRed Hat Enterprise Linux 10/keylime-agent-rust Rust / CargoRed Hat متوسط اصلاح گزارش شده
time vulnerable to stack exhaustion Denial of Service attackCVE-2026-25727 · GHSA-R6V5-FH4H-64XCبازه‌ها نیاز به بررسی دارند. timeConfidential Compute Attestation/build-of-trustee/trustee-rhel9 Rust / CargoRed Hat متوسط اصلاح گزارش شده
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988 Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9 Red Hat کم اصلاح اعلام نشده
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat کم اصلاح اعلام نشده
hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat متوسط اصلاح اعلام نشده
hex: hex: Terminal output spoofing via unescaped control sequencesCVE-2026-81856 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat متوسط اصلاح اعلام نشده