Vulnérabilités de Red Hat Cert Manager support for Red Hat OpenShift release 1.19

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Moyenne	20 juil. 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Moyenne	30 juin 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 Élevée	30 juin 2026
CVE-2026-58013	Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	6.5 Moyenne	30 juin 2026
CVE-2026-58012	Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	6.5 Moyenne	30 juin 2026
CVE-2026-58010	Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	6.5 Moyenne	30 juin 2026
CVE-2026-58011	Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	6.5 Moyenne	30 juin 2026
CVE-2026-54371	attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that…	8.4 Élevée	29 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critique	22 mai 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critique	22 mai 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Moyenne	22 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-39883	OpenTelemetry-Go is the Go implementation of OpenTelemetry	7.3 Élevée	8 avr. 2026
CVE-2026-29181	OpenTelemetry-Go is the Go implementation of OpenTelemetry	7.5 Élevée	7 avr. 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026

Autres produits Red Hat