Critical: Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

CVE-2026-54422

A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...

CVE-2026-54422: Insufficiently Protected Credentials

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-PQF5-4PQQ-29F5 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, komodo, typst, ztunnel-fips, sccache, vector, valkey-ldap, sqlx, rpm-sequoia, bootc, rustls-openssl-client, sentry-cli, deno, rustup, guestproxyagent...

GHSA-FWJ4-6WGP-MPXM Katello: Denial of Service and potential information disclosure via SQL injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

SQL Injection

Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to SQL Injection via improper sanitization of user input in the sortby parameter of the /api/hosts/bootcimages endpoint. An attacker can cause database errors or...

CVE-2026-4324 Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

CVE-2026-4324

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

Red Hat Satellite SQL注入漏洞

Red Hat Satellite is a system management platform developed by Red Hat Inc. This platform can be used to expand Linux infrastructure and provides system management functions such as administration, configuration, and monitoring. Red Hat Satellite 6 has a SQL injection vulnerability, which stems...

Katello - Denial of Service and potential information disclosure via SQL injection'

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

MiracleLinux 9 : bootc-1.1.6-3.el9_6 (AXSA:2025-10277:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10277:01 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : bootc (ALSA-2025:7160)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the AlmaLinux...