Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 security and extras update

Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

redteam-pivot-copilot

Red Team Pivot Copilot Lab-Only, Human-in-the-Loop A reason...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: thrift: perl-thrift-0.25.0-0.1.hum1 noarch python3-thrift-0.25.0-0.1.hum1 aarch64, x8664 thrift-0.25.0-0.1.hum1 aarch64, x8664 thrift-devel-0.25.0-0.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (CUDA 12.9)

Red Hat AI Base Images 3.3.4 CUDA 12.9 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (Spyre)

Red Hat AI Base Images 3.3.4 Spyre is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (ROCm 7.0)

Red Hat AI Base Images 3.3.4 ROCm 7.0 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (CUDA 13.0)

Red Hat AI Base Images 3.3.4 CUDA 13.0 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (ROCm 6.4)

Red Hat AI Base Images 3.3.4 ROCm 6.4 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (TPU)

Red Hat AI Base Images 3.3.4 TPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (CPU)

Red Hat AI Base Images 3.3.4 CPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.2-1.1.hum1 aarch64, x8664 podman-docker-6.1.2-1.1.hum1 noarch podman-machine-6.1.2-1.1.hum1 aarch64, x8664 podman-remote-6.1.2-1.1.hum1 aarch64, x8664 podmansh-6.1.2-1.1.hum1...

RHCOS 4 : OpenShift Container Platform 4.17.58 (RHSA-2026:70585)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70585 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 - encoding/asn1: golang: G...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-abi-stablelists / kernel-core / kernel-debug / etc Multiple Vulnerabilities (crlsa-2026_53329)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202653329 advisory. kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU...

PT-2026-103916

Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Description An authentication bypass exists in the '/unattended/provision' API endpoint due to a semantic logic flaw in host verifier.rb. The application checks the database state of a provisioning token...

PT-2026-103915

Name of the Vulnerable Software and Affected Versions rubygem-foreman remote execution affected versions not specified Description A command injection flaw exists in the Red Hat Satellite API endpoint '/api/v2/job invocations'. The issue occurs when a job template has the effective user property...

CVE-2026-12405: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rubygem-foremanremoteexecution. A command injection vulnerability exists in the Red Hat Satellite API /api/v2/jobinvocations. When a job template has the effectiveuser property marked as overridable: true, the application fails to properly sanitize the effectiveuser input...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.2.5 (RHSA-2026:73981)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73981 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

CVE-2026-12423: Missing Authentication for Critical Function

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in hostverifier.rb. The application verifies the database state of a provisioning token rather than its actual presence in the incoming HTTP...

CVE-2026-56097: Improper Neutralization of Special Elements used in an SQL Command

A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods checkblobpushorglabel and...

RHEL 9 : kernel (RHSA-2026:74174)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74174 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: linux/dim: Fix divide by 0 in...