Red Hat OpenStack Platform 18.0.

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• Memory corruption

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• Broken access control

Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• CWE-672

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• Denial of service

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• Memory corruption

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• CWE-345

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

• Red Hat Confidential Compute Attestation
• Red Hat DPU kit for NVIDIA
• Denial of service

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

• Red Hat Ansible Automation Platform 2.6
• Red Hat Ansible Automation Platform 2.7
• Code injection

Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison

• Red Hat OpenStack Platform 18.0
• CWE-208

Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)

• Red Hat OpenStack Platform 18.0
• Denial of service

Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

• Red Hat Build of Podman Desktop
• Red Hat Certification Program for Red Hat Enterprise Linux 9
• Path traversal

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

• Red Hat Migration Toolkit for Applications 8
• Red Hat Migration Toolkit for Virtualization
• Path traversal

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

• Red Hat Ceph Storage 5
• Red Hat Ceph Storage 9
• Weak cryptography or TLS

Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

• Red Hat Ceph Storage 5
• Red Hat Ceph Storage 9
• Insecure deserialization

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

• Red Hat Ceph Storage 5
• Red Hat Ceph Storage 9
• CWE-214

Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

• Red Hat Fast Datapath for RHEL 7
• Red Hat Fast Datapath for RHEL 8
• Memory corruption

Unbound: heap-buffer-overflow in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: null pointer dereference in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform

• Red Hat OpenStack Platform 16.1
• Red Hat OpenStack Platform 16.2
• Denial of service

Etcd: incomplete fix for cve-2021-44716 in openstack platform

• Red Hat OpenStack Platform 16.1
• Red Hat OpenStack Platform 16.2
• Denial of service

Etcd: incomplete fix for cve-2022-41723 in openstack platform

• Red Hat OpenStack Platform 16.1
• Red Hat OpenStack Platform 16.2
• Denial of service

Tripleo-ansible: bind keys are world readable

• Red Hat OpenStack Platform 17.1 for RHEL 8
• Red Hat OpenStack Platform 17.1 for RHEL 9
• CWE-1220