Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.hum1 aarch64, x8664 trivy-0.72.0-0.1.hum1.src src Security Fixes: trivy: CVE-2026-46680 CVE-2026-47262 CVE-2026-53488...

DEBIAN-CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: helm-fips, trivy-fips, linkerd2-fips, helm-operator, helm-exporter-fips, newrelic-infrastructure-agent, neuvector, cloudbeat, cluster-api-helm-controller, crossplane, helm-exporter, headlamp-fips, datadog-agent, xeol, rancher-helm, chaos-mesh-fips, helm-push,...

UBUNTU-CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1897)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1897 advisory. Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, rancher-helm, skaffold, linkerd2, headlamp, docker-cli-buildx, teleport, datadog-agent, fuse-overlayfs-snapshotter, syft, trivy, trivy-operator, dagger, kubescape-operator, wolfictl, zarf, scorecard, zot, helm-mapkubeapis,...