Red Hat Openshift Container Platform For IBM Z

Rhsso-container-image: unsecured management interface exposed to adjecent network

Keycloak: path transversal in redirection validation

Keycloak: client access via device auth request spoof

Glib: integer overflow in in g_escape_uri_string()

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Keycloak: redirect_uri validation bypass

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Kubevirt-csi: persistentvolume allows access to hcp's root node

Keycloak: vulnerable redirect uri validation results in open redirec