64038 matches found
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
EUVD-2026-51095
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...
CVE-2026-18382
The CVE-2026-18382 affects the koku-metrics-operator. A flaw in the operator’s CostManagementMetricsConfig custom resource lets a user edit the CR to specify an arbitrary OAuth token endpoint. If authentication.type is service-account, the operator sends the tenant’s Red Hat SSO client_id and cli...
CVE-2026-18382 Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...
EUVD-2026-51094
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token the default, the cluster-global Red Hat Cloud pull-secret bearer token is attached to...
CVE-2026-18382
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...
CVE-2026-18381
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.8.hum1 aarch64, x8664 jaeger-2.20.0-0.8.hum1.src src Security Fixes: jaeger: CVE-2026-62995...
CVE-2026-56444
A Denial of Service DoS flaw exists in Unbound under specific serve-expired and discard-timeout configurations. By sending crafted queries, a remote attacker can exhaust an internal counter, causing the server to drop new legitimate client queries and degrade resolution services. Mitigation To...
RHSA-2026:48615 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
RHSA-2026:48603 Red Hat Security Advisory: hplip security update
Bulletin has no description...
RHSA-2026:48606 Red Hat Security Advisory: hplip security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:48171 Red Hat Security Advisory: hplip security update
Bulletin has no description...
RHSA-2026:48222 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
RHSA-2026:48034 Red Hat Security Advisory: nodejs24 security update
Bulletin has no description...
RHSA-2026:48036 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:48032 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
RHSA-2026:48033 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...