CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3. A patched version of the package is available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.10 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 packages and security update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.10 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.29 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.29 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

BIT-DISTRIBUTION-2026-41888 Distribution: Tag deletion bypasses `storage.delete.enabled` configuration

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2//manifests/ endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.29 security and extras update

Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 security and extras update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.10 security and extras update

Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

OpenZFS Linux Authorization Bypass / Memory Corruption

OpenZFS on Linux contains multiple authorization and parser flaws that can allow low-privileged container users to access host-pool operations, corrupt cross-tenant storage, trigger kernel memory corruption and denial of service, and, under demonstrated research conditions, escalate to a host uid...

PT-2026-80446

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

Red Hat Security Advisory 2026-54580-03

Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...

Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-138 (ALASDOCKER-2026-138)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-138 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extract...

Red Hat Security Advisory 2026-54599-03

Red Hat Security Advisory 2026-54599-03 - Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, information leakage, privilege escalation, and traversal vulnerabilities...

Red Hat Security Advisory 2026-54769-03

Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...

PT-2026-77144

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the governance-policy-addon-controller component allows a user with permissions to annotate the namespaced ManagedClusterAddOn resource to...

Red Hat Security Advisory 2026-54581-03

Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...