A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF…

Sssd: sssd: denial of service via incomplete identity provider authentication requests

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Sssd: sssd: information disclosure via odata injection in entra id lookups

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

A misconfiguration flaw was found in Keycloak

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging…

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3

A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1

Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or…

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle…

Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…

A vulnerability was found in OpenShift OSIN

A flaw was found in openshift-ansible

A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not…

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this…

A vulnerability has been identified in the libarchive library

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

Sssd: sssd: denial of service via memory exhaustion in autofs responder

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Nano: nano: format string vulnerability leads to denial of service

Sssd: out-of-bounds read in the sssd

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Polkit: polkit: denial of service via unbounded input processing through standard input

Grub2: fs/bfs: integer overflow in the bfs parser.

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are…

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log

A vulnerability was found in OpenShift Assisted Installer

A flaw was found in the Linux kernel

A flaw was found in NetworkManager in versions before 1.30.0

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information

The kubectl cp command allows copying files between containers and the user machine

The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data…

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and…

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization