Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Red Hat OpenShift Container Platform release 4.22.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

RHSA-2026:52912 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.9 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.33 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.28 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.28 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-19519

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service...

CVE-2026-19519

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service. Mitigation Where possible, configur...

grype v0.117.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

CVE-2026-61632 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-67422 vulnerabilities

Vulnerabilities for packages: open-webui...

PT-2026-70337

Name of the Vulnerable Software and Affected Versions gaudi-container-runtime versions prior to 1.24.0 Description A path traversal issue exists within Ring 3: User Applications, which may allow an authenticated, unprivileged software adversary to escalate privileges. This can occur via local...

PT-2026-70527

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description Incorrect authorization in the unionfs.sys driver allows an authorized attacker to disclose sensitive information locally and affect the syste...

PT-2026-70833

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...

CVE-2026-63134: Improper Limitation of a Pathname to a Restricted Directory

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py protects file extraction with libarchive's secure flags, but creates directory entries with a raw os.makedirsos.path.joindest, entry.pathname that has no traversal protection. An uploaded malicious archive...

PT-2026-76420

These are all security issues fixed in the clusterctl-1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70081

Name of the Vulnerable Software and Affected Versions claircore affected versions not specified Description A flaw in the RPM package scanner allows a denial of service. Specifically, crafted RPM header data within a container layer can trigger an unchecked type assertion, causing the scanner to...

CVE-2026-62775: Incorrect Authorization

Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

CVE-2026-32677: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-62772: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...