Most recent entries from csaf_redhat

RHSA-2026:74457 — Red Hat Security Advisory: ghostscript security update

Fri, 02 Oct 2026 07:25:46 +0000

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74464 — Red Hat Security Advisory: ghostscript security update

Thu, 01 Oct 2026 13:20:17 +0000

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74581 — Red Hat Security Advisory: skopeo security update

Thu, 01 Oct 2026 19:11:40 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:74023 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF IBU extras update

Wed, 30 Sep 2026 14:55:17 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

RHSA-2026:73987 — Red Hat Security Advisory: RHOAI 3.3.7 - Red Hat OpenShift AI

Wed, 30 Sep 2026 13:36:01 +0000

golang: net/url: Memory exhaustion in query parameter parsing in net/url urllib3: urllib3 Streaming API improperly handles highly compressed data nltk: NLTK: Arbitrary Code Execution via Eval Injection in Collocations Module undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression undici: undici: Denial of Service via crafted WebSocket frame with large length undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter jupyter-server: jupyter-server: Sensitive data exposure via path traversal vulnerability fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy keras: Keras: Arbitrary file write via path traversal in archive extraction utilities sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression…

RHSA-2026:73518 — Red Hat Security Advisory: OpenShift Container Platform 4.16 CNF vRAN extras topology aware lifecycle manager update

Tue, 29 Sep 2026 16:41:14 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:73508 — Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager update

Tue, 29 Sep 2026 14:46:36 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:71455 — Red Hat Security Advisory: OpenShift Container Platform 4.21.35 security and extras update

Tue, 29 Sep 2026 06:31:17 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:73085 — Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update

Tue, 29 Sep 2026 07:53:39 +0000

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

RHSA-2026:72508 — Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF IBU extras update

Mon, 28 Sep 2026 13:37:39 +0000