Vulnérabilités de Red Hat Red Hat OpenStack Platform 17.1

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 Élevée	15 oct. 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 Élevée	8 oct. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Moyenne	16 sept. 2026
CVE-2026-75092	Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins	7.3 Élevée	15 sept. 2026
CVE-2026-84828	Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	6.5 Moyenne	10 sept. 2026
CVE-2026-87872	A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection	6.8 Moyenne	9 sept. 2026
CVE-2026-87874	A flaw was found in the memcached cache plugin of the community.general Ansible collection	8.1 Élevée	9 sept. 2026
CVE-2026-80158	A flaw was found in the ipa_getkeytab module of the community.general Ansible collection	5.5 Moyenne	26 août 2026
CVE-2026-49759	Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to…	8.8 Élevée	10 juin 2026
CVE-2026-11837	Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown	7.3 Élevée	10 juin 2026
CVE-2026-50589	In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some…	5.3 Moyenne	4 juin 2026
CVE-2026-44393	An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0	7.4 Élevée	4 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-42999	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Moyenne	28 mai 2026
CVE-2026-43000	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Moyenne	28 mai 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 Élevée	27 mai 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 Élevée	27 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critique	22 mai 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critique	22 mai 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 Élevée	22 mai 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critique	22 mai 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Moyenne	22 mai 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Moyenne	22 mai 2026

Autres produits Red Hat