openstack_platform vulnerabilities
CVEs whose affected-version data names the openstack_platform package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
62 CVEsRSS
CVE-2021-32760Medium· 5.5containerd: pulling and extracting crafted container image may result in Unix file permission changes (CVE-2021-32760)
A flaw was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expe…
▾ SunlitRed Hat · RHOSSM 2.4 for RHEL 8EPSS 1.6%via CSAF
CVE-2021-29482High· 7.5ulikunitz/xz: Infinite loop in readUvarint allows for denial of service (CVE-2021-29482)
A flaw was found in github.com/ulikunitz/xz. The function readUvarint may not terminate a loop what could lead to denial of service (DoS).
▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4EPSS 1.4%via CSAF