openshift4/microshift-bootc-rhel9 vulnerabilities

CVEs whose affected-version data names the openshift4/microshift-bootc-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-114236Low· 3.3

1w ago

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

▾ SunlitRed Hat · openshift-sandboxed-containers/osc-podvm-builder-rhel9EPSS 0.10%via CVEORG

CVE-2026-92574High· 8.8

1mo ago

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities…

▾ TwilightRed Hat · openshift-sandboxed-containers/osc-monitor-rhel9EPSS 0.65%via NVD