Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHSA-2026:47614 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.9 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.33 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Critical: Red Hat Security Advisory: RHOAI 3.3.6 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.3.6 provides these changes:...

Critical: Red Hat Security Advisory: RHOAI 3.4.3 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.3 provides these changes:...

PT-2026-70189

Name of the Vulnerable Software and Affected Versions SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 versions prior to V4.3.4.1 Description Devices running Industrial OS with Node-RED installed do not enforce authentication on the Node-RED HTTP interface. This allows unauthenticated access to...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 kernel:...

CVE-2026-71474: Insertion of Sensitive Information into Log File

A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...

CVE-2026-58115: Missing Authentication for Critical Function

A vulnerability has been identified in SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 All versions V4.3.4.1 running Industrial OS with Node-RED installed. Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are...

PT-2026-70869

Name of the Vulnerable Software and Affected Versions insights-client affected versions not specified Description A flaw exists where the application logs request headers upon receiving a non-200 response. This process may expose the cloud.openshift.com pull-secret token. A local user with access...

Siemens SIMATIC IoT2050 Advanced

SUMMARY SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server...

CVE-2026-66806

A flaw was found in console. When the HTTPSPROXY environment variable is not configured, the console component fails to verify Transport Layer Security TLS certificates for outbound connections. A network-positioned attacker Man-in-the-Middle can exploit this vulnerability to intercept the cluste...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.1.hum1 aarch64, x8664 glibc-2.43-8.1.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.1.hum1 aarch64, x8664 glibc-benchtests-2.43-8.1.hum1 aarch64, x8664...

EUVD-2026-55821

A flaw was found in the Red Hat OpenShift AI RHOAI overlay for the training operator. The RHOAI overlay incorrectly aggregates trainjobs management permissions into the native Kubernetes edit ClusterRole. This allows any user with edit ClusterRole permissions in a namespace to create, modify, and...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.7.0-1.5.1.hum1 aarch64, x8664 nodejs26-bin-26.7.0-1.5.1.hum1 noarch nodejs26-devel-26.7.0-1.5.1.hum1 aarch64, x8664 nodejs26-docs-26.7.0-1.5.1.hum1 noarch...

Moderate: Red Hat Security Advisory: libgcrypt security update

An update for libgcrypt is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...