Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (Neuron)

Red Hat AI Base Images 3.3.3 Neuron is now available. Red Hat® AI Base Images...

CVE-2026-78427

The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission den...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.8.2 security update

Multicluster Global Hub v1.8.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2026-8863

CVE-2026-8863 Collection of the signed UEFI Secure Boot shim binaries affected by CVE-2026-8863, with the embedded shim version, Authenticode signer and revocation hashes of each image. Releases that ship the byte-identical signed shim are collapsed onto a single row — one Authenticode hash is on...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.161.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.4.hum1 aarch64, x8664 grafana12.4-12.4.10-0.4.hum1.src src Security Fixes: grafana12.4: CVE-2026-86472...

trivy-plugin-attest

trivy-plugin-attest SBOM アテステーションを公開 インストール root@kitploit: $ trivy plugin install github.com/aquasecurity/trivy-plugin-attest 使い方 root@kitploit: A Trivy plugin that publish SBOM attestation Usage: attest flags Examples: trivy attest --type PREDICATETYPE --predicate PREDICATEPATH BLOBPATH Publish...

PIL-CVE-2017-8291

Python PIL/Pillow リモートコマンド実行 GhostButt / CVE-2017-8291 中国語版 Chinese version Python PIL Pillow は、Python で人気の画像処理ライブラリです。さまざまな画像形式をサポートし、強力な画像操作機能を提供します。 Python 画像処理モジュール PIL Pillow は、内部で GhostScript を呼び出して EPS 画像を処理するため、GhostButt 脆弱性 CVE-2017-8291 の影響を受けます。この脆弱性により、攻撃者は対象システム上で任意のコマンドを実行できます。 PIL...

cve-2019-14206-poc

CVE-2019-14206 - Adaptive Images for WordPress Arbitrary File Deletion 📋 Index 1. About the Vulnerability 2. Prerequisites 3. Installation 4. Testing Methods Quick Test Full Test with Docker Test with Nuclei Manual Test 5. Interpreting Results 6. Cleanup 7. Troubleshooting 8. Mitigation 9. Legal...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.3 security update

Multicluster Global Hub v1.7.3 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.47 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: RHACS 4.11.4 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

xpdf-docker

Xpdf Docker 镜像 此仓库包含 Xpdf 4.04 版本的 Docker 镜像，该版本存在漏洞 CVE-2022-30524。 构建镜像 📦 本仓库提供 3 种不同风格的镜像： bullseye/gcc ：Debian "bullseye"，使用 gcc 构建 bullseye/afl ：Debian "bullseye"，使用 afl-clang-fast++ 构建（调试模式） focal/afl ：Ubuntu 20.04 LTS Focal Fossa，使用 afl-clang-fast++ 构建（调试模式） 以下风格是指向其他风格的别名： bullseye →...

pulsar-docker-images-patch-CVE-2021-44228

Patch pulsar images with Apache Log4J 2.17.1 upgrade Covers CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 See Log4J Security Vulnerabilities and upgrades for more information. see the Dockerfile for the solution Building and pushing patched docker images example usage:...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.2 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.5 security update

Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...