| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8بازه‌ها نیاز به بررسی دارند. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Tracing logging user input may result in poisoning logs with ANSI escape sequencesCVE-2025-58160 · GHSA-XWFJ-JGWM-7WP5بازه‌ها نیاز به بررسی دارند. |
tracing-subscriberConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
کم
|
اصلاح گزارش شده |
|
| node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHبازه‌ها نیاز به بررسی دارند. |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glycin-loaders |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()CVE-2025-7039 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()CVE-2026-0988 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| Glib: GLib: Memory corruption via integer overflow in Unicode case conversionCVE-2026-1489 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| Glib: Glib: Local denial of service via buffer underflow in content type parsingCVE-2026-1485 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()CVE-2026-1484 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/glib2 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processingCVE-2026-28390 |
Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundleConfidential Cluster Operator/redhat-user-workloads/attestation-key-register |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988 |
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| tar: tar-rs: Information Disclosure via Symlink EscapeCVE-2026-70622 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9OpenShift Lightspeed/openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| nix: Nix: Arbitrary file truncation via time-of-check/time-of-use raceCVE-2026-64846 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Compute Attestation/agent-sandbox/agent-sandbox-router |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallbackCVE-2026-89156 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/mariadb10.11 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platformsCVE-2026-89158 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/mariadb10.11 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_matchCVE-2026-89161 |
Red Hat Enterprise Linux 10/bootcRed Hat Enterprise Linux 10/mingw-pcre2 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
