Red Hat Security AdvisoryRHSA-2026:2351
VolSync v0.13 security fixes and container updates
Released 2026-02-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/volsync-rhel9
Fixes 3 records
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
Priority LOW 31
Cancelling a query (e.g.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-08-07 · Partial fix · 1.23.12, 1.24.6 CWE-362
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00443 · Published 2025-10-29 · Partial fix · 1.24.8, 1.25.2
