Cert Manager support for Red Hat OpenShift release 1.18.

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

• xdgmime
• Red Hat Enterprise Linux 10
• Memory corruption

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

• GNOME GLib
• Red Hat Enterprise Linux 10
• Memory corruption

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

• GNOME GLib
• Red Hat Enterprise Linux 10
• Memory corruption

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

• GNOME GLib
• Red Hat Enterprise Linux 10
• CWE-126

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-193

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

• GNOME glib
• Red Hat Enterprise Linux 10
• Memory corruption

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

• GNOME glib
• Red Hat Enterprise Linux 10
• Memory corruption

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Libxml2: stack buffer overflow in xmllint interactive shell command handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption