Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this…

A vulnerability has been identified in the libarchive library

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

Sssd: sssd: denial of service via memory exhaustion in autofs responder

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Nano: nano: format string vulnerability leads to denial of service

Sssd: out-of-bounds read in the sssd

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Polkit: polkit: denial of service via unbounded input processing through standard input

Grub2: fs/bfs: integer overflow in the bfs parser.

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are…

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log

A vulnerability was found in OpenShift Assisted Installer

A flaw was found in the Linux kernel

A flaw was found in NetworkManager in versions before 1.30.0

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information

The kubectl cp command allows copying files between containers and the user machine

The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data…

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and…

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

A flaw was found in the libssh library in versions less than 0.11.2

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token

A flaw was found in Keycloak in the execute-actions-email endpoint

A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a…

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and…

The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site…

An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java,…

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11

Sssd: sssd: information disclosure via query injection in entra id lookups

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Gnutls: vulnerability in gnutls sct extension parsing

A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query

A content spoofing flaw was found in OpenShift's OAuth endpoint

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively,…

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions

An information disclosure vulnerability was found in containers/podman in versions before 2.0.5

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return