Most recent entries from csaf_redhat

RHSA-2026:74457 — Red Hat Security Advisory: ghostscript security update

2026-10-02T07:26:17+00:00

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74464 — Red Hat Security Advisory: ghostscript security update

2026-10-02T07:26:07+00:00

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74581 — Red Hat Security Advisory: skopeo security update

2026-10-02T07:15:19+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:74023 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF IBU extras update

2026-10-02T07:15:19+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

RHSA-2026:73987 — Red Hat Security Advisory: RHOAI 3.3.7 - Red Hat OpenShift AI

2026-10-02T07:15:18+00:00

golang: net/url: Memory exhaustion in query parameter parsing in net/url urllib3: urllib3 Streaming API improperly handles highly compressed data nltk: NLTK: Arbitrary Code Execution via Eval Injection in Collocations Module undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter jupyter-server: jupyter-server: Sensitive data exposure via path traversal vulnerability fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy keras: Keras: Arbitrary file write via path traversal in archive extraction utilities sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression…

RHSA-2026:73518 — Red Hat Security Advisory: OpenShift Container Platform 4.16 CNF vRAN extras topology aware lifecycle manager update

2026-10-02T07:15:18+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:73508 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager update

2026-10-02T07:15:17+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:71455 — Red Hat Security Advisory: OpenShift Container Platform 4.21.35 security and extras update

2026-10-02T07:15:16+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:73085 — Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update

2026-10-02T07:15:15+00:00

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:72508 — Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF IBU extras update

2026-10-02T07:15:15+00:00