In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and…

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift

A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloads on master nodes

Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that…

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java…

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

A flaw was found in the redirect_uri validation logic in Keycloak

A flaw was found in Keycloak

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker…

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker…

A flaw was found in noobaa-core in versions before 5.7.0

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image (.tar file)…

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or…

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4

A flaw was found in podman before 1.7.0

It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd…

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of…

Samba: group policy certificate enrollment uses http:// without validation

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

A flaw was found in rsync

A flaw was found in the offline_access scope in Keycloak

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed

A flaw was found in polkit

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication

A vulnerability has been identified in the libarchive library

A vulnerability has been identified in the libarchive library

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Libarchive: libarchive: denial of service via malformed iso file processing

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation