Red Hat Openshift Container Platform For Linuxone

Rhsso-container-image: unsecured management interface exposed to adjecent network

Keycloak: path transversal in redirection validation

Keycloak: client access via device auth request spoof

Cri-o: /etc/passwd tampering privesc

Glib: integer overflow in in g_escape_uri_string()

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Undertow: infinite loop in sslconduit during close

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

Ocp & fips mode

Keycloak: redirect_uri validation bypass

Keycloak: session takeover with oidc offline refreshtokens

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Keycloak: potential bypass of brute force protection

Kubevirt-csi: persistentvolume allows access to hcp's root node

Keycloak: vulnerable redirect uri validation results in open redirec